diff --git a/package-lock.json b/package-lock.json
index 3a3f7c3c1..651add451 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -24,7 +24,7 @@
         "commitizen": "4.2.4",
         "concurrently": "7.2.1",
         "cz-conventional-changelog": "3.3.0",
-        "dotenv": "16.0.1",
+        "dotenv": "16.4.3",
         "eslint": "8.17.0",
         "eslint-config-prettier": "8.5.0",
         "eslint-plugin-cypress": "2.12.1",
@@ -5384,12 +5384,15 @@
       }
     },
     "node_modules/dotenv": {
-      "version": "16.0.1",
-      "resolved": "https://registry.npmjs.org/dotenv/-/dotenv-16.0.1.tgz",
-      "integrity": "sha512-1K6hR6wtk2FviQ4kEiSjFiH5rpzEVi8WW0x96aztHVMhEspNpc4DVOUTEHtEva5VThQ8IaBX1Pe4gSzpVVUsKQ==",
+      "version": "16.4.3",
+      "resolved": "https://registry.npmjs.org/dotenv/-/dotenv-16.4.3.tgz",
+      "integrity": "sha512-II98GFrje5psQTSve0E7bnwMFybNLqT8Vu8JIFWRjsE3khyNUm/loZupuy5DVzG2IXf/ysxvrixYOQnM6mjD3A==",
       "dev": true,
       "engines": {
         "node": ">=12"
+      },
+      "funding": {
+        "url": "https://dotenvx.com"
       }
     },
     "node_modules/duplexer": {
@@ -17840,9 +17843,9 @@
       }
     },
     "dotenv": {
-      "version": "16.0.1",
-      "resolved": "https://registry.npmjs.org/dotenv/-/dotenv-16.0.1.tgz",
-      "integrity": "sha512-1K6hR6wtk2FviQ4kEiSjFiH5rpzEVi8WW0x96aztHVMhEspNpc4DVOUTEHtEva5VThQ8IaBX1Pe4gSzpVVUsKQ==",
+      "version": "16.4.3",
+      "resolved": "https://registry.npmjs.org/dotenv/-/dotenv-16.4.3.tgz",
+      "integrity": "sha512-II98GFrje5psQTSve0E7bnwMFybNLqT8Vu8JIFWRjsE3khyNUm/loZupuy5DVzG2IXf/ysxvrixYOQnM6mjD3A==",
       "dev": true
     },
     "duplexer": {
diff --git a/package.json b/package.json
index fd7c3408d..40634455c 100644
--- a/package.json
+++ b/package.json
@@ -64,7 +64,7 @@
     "commitizen": "4.2.4",
     "concurrently": "7.2.1",
     "cz-conventional-changelog": "3.3.0",
-    "dotenv": "16.0.1",
+    "dotenv": "16.4.3",
     "eslint": "8.17.0",
     "eslint-config-prettier": "8.5.0",
     "eslint-plugin-cypress": "2.12.1",
diff --git a/packages/shopping/package.json b/packages/shopping/package.json
index 9d8c0362e..69607c235 100644
--- a/packages/shopping/package.json
+++ b/packages/shopping/package.json
@@ -65,7 +65,7 @@
     "bcryptjs": "2.4.3",
     "casbin": "5.15.1",
     "debug": "4.3.4",
-    "dotenv": "16.0.1",
+    "dotenv": "16.4.3",
     "express": "4.18.1",
     "isemail": "3.2.0",
     "jsonwebtoken": "8.5.1",