diff --git a/app/package-lock.json b/app/package-lock.json
index 55062926be..29964df02b 100644
--- a/app/package-lock.json
+++ b/app/package-lock.json
@@ -14,7 +14,7 @@
         "@grimlink/eleventy-plugin-lucide-icons": "^1.0.5",
         "@uswds/uswds": "^3.6.1",
         "dompurify": "^3.1.6",
-        "dotenv": "^16.3.1",
+        "dotenv": "^16.4.5",
         "markdown-it": "^13.0.2",
         "markdown-it-link-attributes": "^4.0.1"
       },
@@ -2655,14 +2655,15 @@
       }
     },
     "node_modules/dotenv": {
-      "version": "16.3.1",
-      "resolved": "https://registry.npmjs.org/dotenv/-/dotenv-16.3.1.tgz",
-      "integrity": "sha512-IPzF4w4/Rd94bA9imS68tZBaYyBWSCE47V1RGuMrB94iyTOIEwRmVL2x/4An+6mETpLrKJ5hQkB8W4kFAadeIQ==",
+      "version": "16.4.5",
+      "resolved": "https://registry.npmjs.org/dotenv/-/dotenv-16.4.5.tgz",
+      "integrity": "sha512-ZmdL2rui+eB2YwhsWzjInR8LldtZHGDoQ1ugH85ppHKwpUHL7j7rN0Ti9NCnGiQbhaZ11FpR+7ao1dNsmduNUg==",
+      "license": "BSD-2-Clause",
       "engines": {
         "node": ">=12"
       },
       "funding": {
-        "url": "https://github.com/motdotla/dotenv?sponsor=1"
+        "url": "https://dotenvx.com"
       }
     },
     "node_modules/eastasianwidth": {
@@ -10020,9 +10021,9 @@
       }
     },
     "dotenv": {
-      "version": "16.3.1",
-      "resolved": "https://registry.npmjs.org/dotenv/-/dotenv-16.3.1.tgz",
-      "integrity": "sha512-IPzF4w4/Rd94bA9imS68tZBaYyBWSCE47V1RGuMrB94iyTOIEwRmVL2x/4An+6mETpLrKJ5hQkB8W4kFAadeIQ=="
+      "version": "16.4.5",
+      "resolved": "https://registry.npmjs.org/dotenv/-/dotenv-16.4.5.tgz",
+      "integrity": "sha512-ZmdL2rui+eB2YwhsWzjInR8LldtZHGDoQ1ugH85ppHKwpUHL7j7rN0Ti9NCnGiQbhaZ11FpR+7ao1dNsmduNUg=="
     },
     "eastasianwidth": {
       "version": "0.2.0",
diff --git a/app/package.json b/app/package.json
index f38b020d16..b2044c4fb8 100644
--- a/app/package.json
+++ b/app/package.json
@@ -28,7 +28,7 @@
     "@grimlink/eleventy-plugin-lucide-icons": "^1.0.5",
     "@uswds/uswds": "^3.6.1",
     "dompurify": "^3.1.6",
-    "dotenv": "^16.3.1",
+    "dotenv": "^16.4.5",
     "markdown-it": "^13.0.2",
     "markdown-it-link-attributes": "^4.0.1"
   },