diff --git a/package.json b/package.json
index 5802a357c0..9c0dc964c5 100644
--- a/package.json
+++ b/package.json
@@ -97,7 +97,7 @@
     "crypto-js": "4.2.0",
     "currency-symbol-map": "5.1.0",
     "dayjs": "1.11.8",
-    "dotenv": "16.4.1",
+    "dotenv": "16.4.3",
     "entities": "4.5.0",
     "etag": "1.8.1",
     "fanfou-sdk": "4.2.0",
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index bada90e4f6..5a623e8023 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -48,8 +48,8 @@ dependencies:
     specifier: 1.11.8
     version: 1.11.8
   dotenv:
-    specifier: 16.4.1
-    version: 16.4.1
+    specifier: 16.4.3
+    version: 16.4.3
   entities:
     specifier: 4.5.0
     version: 4.5.0
@@ -3299,8 +3299,8 @@ packages:
       domhandler: 5.0.3
     dev: false
 
-  /dotenv@16.4.1:
-    resolution: {integrity: sha512-CjA3y+Dr3FyFDOAMnxZEGtnW9KBR2M0JvvUtXNW+dYJL5ROWxP9DUHCwgFqpMk0OXCc0ljhaNTr2w/kutYIcHQ==}
+  /dotenv@16.4.3:
+    resolution: {integrity: sha512-II98GFrje5psQTSve0E7bnwMFybNLqT8Vu8JIFWRjsE3khyNUm/loZupuy5DVzG2IXf/ysxvrixYOQnM6mjD3A==}
     engines: {node: '>=12'}
     dev: false