diff --git a/package-lock.json b/package-lock.json
index b414f0dc..2bd0fb1a 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -23,7 +23,7 @@
         "body-parser": "2.4.0",
         "cli-progress": "3.12.0",
         "dayjs": "1.11.23",
-        "dotenv": "18.0.7",
+        "dotenv": "18.0.9",
         "express": "5.3.0",
         "express-async-handler": "1.2.0",
         "fast-xml-builder": "1.3.1",
@@ -5257,9 +5257,9 @@
       }
     },
     "node_modules/dotenv": {
-      "version": "18.0.7",
-      "resolved": "https://registry.npmjs.org/dotenv/-/dotenv-18.0.7.tgz",
-      "integrity": "sha512-QEvMEF8ca3GNZJJnAbOgxpj5ULhBvnMcURp+XKrtvqFNPgjBvYoswQ0Jl2cO7JzCjxZjJhr9ZuIEhlrRxMft/Q==",
+      "version": "18.0.9",
+      "resolved": "https://registry.npmjs.org/dotenv/-/dotenv-18.0.9.tgz",
+      "integrity": "sha512-3fVOW4cB02R066PUSwn8O4TJyz9NckQl7F81blIbaq9jKBm2tSmOKky7ZHIXzGvkVPXCSn6jkpziBPZdGFs8Tw==",
       "license": "BSD-2-Clause",
       "bin": {
         "dotenv": "dist/index.cjs"
diff --git a/package.json b/package.json
index e7b353df..ec062b01 100644
--- a/package.json
+++ b/package.json
@@ -49,7 +49,7 @@
     "body-parser": "2.4.0",
     "cli-progress": "3.12.0",
     "dayjs": "1.11.23",
-    "dotenv": "18.0.7",
+    "dotenv": "18.0.9",
     "express": "5.3.0",
     "express-async-handler": "1.2.0",
     "fast-xml-builder": "1.3.1",