diff --git a/apps/api/package.json b/apps/api/package.json
index aeb7df1..b05be08 100644
--- a/apps/api/package.json
+++ b/apps/api/package.json
@@ -26,7 +26,7 @@
     "@libsql/client": "^0.17.0",
     "@scalar/hono-api-reference": "^0.9.40",
     "better-auth": "^1.4.18",
-    "dotenv": "^17.0.0",
+    "dotenv": "^18.0.0",
     "drizzle-orm": "^0.45.0",
     "hono": "^4.5.6",
     "uuid": "^13.0.0",
diff --git a/yarn.lock b/yarn.lock
index 9b44381..4775545 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -1884,7 +1884,7 @@ __metadata:
     "@types/jest": "npm:^30.0.0"
     "@types/node": "npm:^20.0.0"
     better-auth: "npm:^1.4.18"
-    dotenv: "npm:^17.0.0"
+    dotenv: "npm:^18.0.0"
     drizzle-kit: "npm:^0.31.9"
     drizzle-orm: "npm:^0.45.0"
     eslint: "npm:^9.39.0"
@@ -4242,10 +4242,12 @@ __metadata:
   languageName: node
   linkType: hard
 
-"dotenv@npm:^17.0.0":
-  version: 17.3.1
-  resolution: "dotenv@npm:17.3.1"
-  checksum: 10c0/c78e0c2d5a549c751e544cc60e2b95e7cb67e0c551f42e094d161c6b297aa44b630a3c2dcacf5569e529a6c2a6b84e2ab9be8d37b299d425df5a18b81ce4a35f
+"dotenv@npm:^18.0.0":
+  version: 18.0.10
+  resolution: "dotenv@npm:18.0.10"
+  bin:
+    dotenv: dist/cli.cjs
+  checksum: 10c0/f07945aeb35f78fe54495025fb10c155cbefa15bdd04a4063aba8519d2756c647ce43f3e0cacbab1e5a7200376f740cbe3e4e7432571ecf4d99eeade7c1dd3a7
   languageName: node
   linkType: hard