diff --git a/package.json b/package.json
index ee5b448f63..1cb180a6ed 100644
--- a/package.json
+++ b/package.json
@@ -27,7 +27,7 @@
     "axios": "^1.13.5",
     "clsx": "^2.1.1",
     "dayjs": "^1.11.20",
-    "dotenv": "^16.5.0",
+    "dotenv": "^17.3.1",
     "fast-clean": "^1.4.0",
     "i18next": "^25.10.9",
     "immer": "^10.1.1",
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index d91a11a7c3..889c890210 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -62,8 +62,8 @@ importers:
         specifier: ^1.11.20
         version: 1.11.20
       dotenv:
-        specifier: ^16.5.0
-        version: 16.6.1
+        specifier: ^17.3.1
+        version: 17.3.1
       fast-clean:
         specifier: ^1.4.0
         version: 1.5.3
@@ -2099,8 +2099,8 @@ packages:
   dot-case@3.0.4:
     resolution: {integrity: sha512-Kv5nKlh6yRrdrGvxeJ2e5y2eRUpkUosIW4A2AS38zwSz27zu7ufDwQPi5Jhs3XAlGNetl3bmnGhQsMtkKJnj3w==}
 
-  dotenv@16.6.1:
-    resolution: {integrity: sha512-uBq4egWHTcTt33a72vpSG0z3HnPuIl6NqYcTrKEg2azoEyl2hpW0zqlxysq2pK9HlDIHyHyakeYaYnSAwd8bow==}
+  dotenv@17.3.1:
+    resolution: {integrity: sha512-IO8C/dzEb6O3F9/twg6ZLXz164a2fhTnEWb95H23Dm4OuN+92NmEAlTrupP9VW6Jm3sO26tQlqyvyi4CsnY9GA==}
     engines: {node: '>=12'}
 
   dunder-proto@1.0.1:
@@ -6195,7 +6195,7 @@ snapshots:
       no-case: 3.0.4
       tslib: 2.8.1
 
-  dotenv@16.6.1: {}
+  dotenv@17.3.1: {}
 
   dunder-proto@1.0.1:
     dependencies: