diff --git a/package-lock.json b/package-lock.json
index 25870d9..bd11f34 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -10,7 +10,7 @@
       "license": "(Apache-2.0 AND MIT)",
       "dependencies": {
         "@glif/filecoin-address": "^3.0.12",
-        "dotenv": "^16.4.5",
+        "dotenv": "^16.4.7",
         "ethers": "^6.13.4",
         "p-retry": "^6.2.0"
       },
@@ -832,9 +832,10 @@
       }
     },
     "node_modules/dotenv": {
-      "version": "16.4.5",
-      "resolved": "https://registry.npmjs.org/dotenv/-/dotenv-16.4.5.tgz",
-      "integrity": "sha512-ZmdL2rui+eB2YwhsWzjInR8LldtZHGDoQ1ugH85ppHKwpUHL7j7rN0Ti9NCnGiQbhaZ11FpR+7ao1dNsmduNUg==",
+      "version": "16.4.7",
+      "resolved": "https://registry.npmjs.org/dotenv/-/dotenv-16.4.7.tgz",
+      "integrity": "sha512-47qPchRCykZC03FhkYAhrvwU4xDBFIj1QPqaarj6mdM/hgUzfPHcpkHJOn3mJAufFeeAxAzeGsr5X0M4k6fLZQ==",
+      "license": "BSD-2-Clause",
       "engines": {
         "node": ">=12"
       },
diff --git a/package.json b/package.json
index f99cc7e..d33855c 100644
--- a/package.json
+++ b/package.json
@@ -19,7 +19,7 @@
   "homepage": "https://github.com/filecoin-station/utils#readme",
   "dependencies": {
     "@glif/filecoin-address": "^3.0.12",
-    "dotenv": "^16.4.5",
+    "dotenv": "^16.4.7",
     "ethers": "^6.13.4",
     "p-retry": "^6.2.0"
   },