diff --git a/package.json b/package.json
index edd63bd4d4..5aa1467276 100644
--- a/package.json
+++ b/package.json
@@ -38,7 +38,7 @@
     "@types/jest": "^29.5.14",
     "@typescript-eslint/eslint-plugin": "^7.3.1",
     "@typescript-eslint/parser": "^7.3.1",
-    "dotenv": "^16.4.5",
+    "dotenv": "^16.4.7",
     "eslint": "^8.57.1",
     "eslint-config-prettier": "^9.1.0",
     "jest": "^29.7.0",
diff --git a/packages/auth/package.json b/packages/auth/package.json
index 6da9c3a03f..4e19040e5a 100644
--- a/packages/auth/package.json
+++ b/packages/auth/package.json
@@ -36,7 +36,7 @@
     "@koa/router": "^12.0.2",
     "ajv": "^8.12.0",
     "axios": "^1.7.4",
-    "dotenv": "^16.4.5",
+    "dotenv": "^16.4.7",
     "graphql": "^16.8.1",
     "ioredis": "^5.3.2",
     "json-canonicalize": "^1.0.6",
diff --git a/packages/backend/package.json b/packages/backend/package.json
index 9c515931dd..bf94f92eff 100644
--- a/packages/backend/package.json
+++ b/packages/backend/package.json
@@ -75,7 +75,7 @@
     "ajv": "^8.12.0",
     "axios": "1.7.4",
     "base64url": "^3.0.1",
-    "dotenv": "^16.4.5",
+    "dotenv": "^16.4.7",
     "extensible-error": "^1.0.2",
     "graphql": "^16.8.1",
     "graphql-middleware": "^6.1.35",
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 6205a2327c..a506804d37 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -45,8 +45,8 @@ importers:
         specifier: ^7.3.1
         version: 7.5.0(eslint@8.57.1)(typescript@5.4.3)
       dotenv:
-        specifier: ^16.4.5
-        version: 16.4.5
+        specifier: ^16.4.7
+        version: 16.4.7
       eslint:
         specifier: ^8.57.1
         version: 8.57.1
@@ -205,8 +205,8 @@ importers:
         specifier: ^1.7.4
         version: 1.7.4
       dotenv:
-        specifier: ^16.4.5
-        version: 16.4.5
+        specifier: ^16.4.7
+        version: 16.4.7
       graphql:
         specifier: ^16.8.1
         version: 16.8.1
@@ -401,8 +401,8 @@ importers:
         specifier: ^3.0.1
         version: 3.0.1
       dotenv:
-        specifier: ^16.4.5
-        version: 16.4.5
+        specifier: ^16.4.7
+        version: 16.4.7
       extensible-error:
         specifier: ^1.0.2
         version: 1.0.2
@@ -777,8 +777,8 @@ importers:
         specifier: ^20.14.15
         version: 20.14.15
       dotenv:
-        specifier: ^16.4.5
-        version: 16.4.5
+        specifier: ^16.4.7
+        version: 16.4.7
       hostile:
         specifier: ^1.4.0
         version: 1.4.0
@@ -3571,7 +3571,7 @@ packages:
       '@whatwg-node/fetch': 0.9.8
       chalk: 4.1.2
       debug: 4.3.7(supports-color@9.4.0)
-      dotenv: 16.4.5
+      dotenv: 16.4.7
       graphql: 16.8.1
       graphql-request: 6.1.0(graphql@16.8.1)
       http-proxy-agent: 7.0.0
@@ -5400,7 +5400,7 @@ packages:
       chalk: 4.1.2
       chokidar: 3.5.3
       cross-spawn: 7.0.6
-      dotenv: 16.4.1
+      dotenv: 16.4.7
       es-module-lexer: 1.4.1
       esbuild: 0.17.6
       esbuild-plugins-node-modules-polyfill: 1.6.1(esbuild@0.17.6)
@@ -9780,8 +9780,8 @@ packages:
     engines: {node: '>=12'}
     dev: true
 
-  /dotenv@16.4.5:
-    resolution: {integrity: sha512-ZmdL2rui+eB2YwhsWzjInR8LldtZHGDoQ1ugH85ppHKwpUHL7j7rN0Ti9NCnGiQbhaZ11FpR+7ao1dNsmduNUg==}
+  /dotenv@16.4.7:
+    resolution: {integrity: sha512-47qPchRCykZC03FhkYAhrvwU4xDBFIj1QPqaarj6mdM/hgUzfPHcpkHJOn3mJAufFeeAxAzeGsr5X0M4k6fLZQ==}
     engines: {node: '>=12'}
 
   /dset@3.1.4:
diff --git a/test/integration/package.json b/test/integration/package.json
index f5393c8a62..3b59ad8a75 100644
--- a/test/integration/package.json
+++ b/test/integration/package.json
@@ -21,7 +21,7 @@
     "@types/koa": "2.15.0",
     "@types/koa-bodyparser": "^4.3.12",
     "@types/node": "^20.14.15",
-    "dotenv": "^16.4.5",
+    "dotenv": "^16.4.7",
     "hostile": "^1.4.0",
     "koa": "^2.15.3",
     "mock-account-service-lib": "workspace:*",