diff --git a/package.json b/package.json
index 052fd62e..dea1f244 100644
--- a/package.json
+++ b/package.json
@@ -21,7 +21,7 @@
     "cos-nodejs-sdk-v5": "2.15.4",
     "debug": "4.4.3",
     "dockerode": "5.0.1",
-    "dotenv": "17.4.2",
+    "dotenv": "18.0.5",
     "express": "4.22.2",
     "express-prom-bundle": "8.0.0",
     "express-rate-limit": "8.6.0",
diff --git a/yarn.lock b/yarn.lock
index 07981fad..450c74a7 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -1189,10 +1189,10 @@ dot-prop@^6.0.1:
   dependencies:
     is-obj "^2.0.0"
 
-dotenv@17.4.2:
-  version "17.4.2"
-  resolved "https://registry.yarnpkg.com/dotenv/-/dotenv-17.4.2.tgz#c07e54a746e11eba021dd9e1047ced5afdc1c034"
-  integrity sha512-nI4U3TottKAcAD9LLud4Cb7b2QztQMUEfHbvhTH09bqXTxnSie8WnjPALV/WMCrJZ6UV/qHJ6L03OqO3LcdYZw==
+dotenv@18.0.5:
+  version "18.0.5"
+  resolved "https://registry.yarnpkg.com/dotenv/-/dotenv-18.0.5.tgz#4fc2c5cd92cf89cdd72c8aa5b82b5a37c0a9a2bf"
+  integrity sha512-aBrGvt6KhjxbEnatqMWOMidftwsrCiCvqh1yNIGB9QyF0J+VcWkKDMsvYOEm7ZS82oiV+BT1sTOtIlAmUlTpwQ==
 
 dunder-proto@^1.0.1:
   version "1.0.1"