diff --git a/packages/devkit/package.json b/packages/devkit/package.json
index 9db3f50297..28e12c2ce4 100644
--- a/packages/devkit/package.json
+++ b/packages/devkit/package.json
@@ -40,7 +40,7 @@
     "@vitejs/plugin-react": "^5.0.2",
     "chalk": "^5.5.0",
     "commander": "^12.1.0",
-    "dotenv": "16.6.1",
+    "dotenv": "17.2.3",
     "execa": "^8.0.1",
     "fast-glob": "^3.3.3",
     "fs-extra": "^11.3.2",
diff --git a/packages/tego/package.json b/packages/tego/package.json
index 82d3f78c8f..a3efb95fb9 100644
--- a/packages/tego/package.json
+++ b/packages/tego/package.json
@@ -57,7 +57,7 @@
     "chalk": "^4.1.2",
     "commander": "^9.5.0",
     "dayjs": "1.11.13",
-    "dotenv": "16.6.1",
+    "dotenv": "17.2.3",
     "execa": "^5.1.1",
     "i18next": "23.16.8",
     "jsonwebtoken": "8.5.1",
diff --git a/packages/test/package.json b/packages/test/package.json
index 074f918fa8..998802f258 100644
--- a/packages/test/package.json
+++ b/packages/test/package.json
@@ -52,7 +52,7 @@
     "@testing-library/user-event": "^14.6.1",
     "@types/supertest": "^6.0.3",
     "@vitejs/plugin-react": "^5.0.2",
-    "dotenv": "16.6.1",
+    "dotenv": "17.2.3",
     "jsdom": "^27.0.0",
     "jsdom-worker": "^0.3.0",
     "jsonwebtoken": "^8.5.1",
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 3b7fb55acd..aabc469546 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -630,8 +630,8 @@ importers:
         specifier: ^12.1.0
         version: 12.1.0
       dotenv:
-        specifier: 16.6.1
-        version: 16.6.1
+        specifier: 17.2.3
+        version: 17.2.3
       execa:
         specifier: ^8.0.1
         version: 8.0.1
@@ -977,8 +977,8 @@ importers:
         specifier: 1.11.13
         version: 1.11.13
       dotenv:
-        specifier: 16.6.1
-        version: 16.6.1
+        specifier: 17.2.3
+        version: 17.2.3
       execa:
         specifier: ^5.1.1
         version: 5.1.1
@@ -1077,8 +1077,8 @@ importers:
         specifier: ^5.0.2
         version: 5.0.2(vite@7.1.10(@types/node@20.17.10)(jiti@2.5.1)(less@4.2.1)(lightningcss@1.26.0)(sass@1.77.8)(terser@5.43.1)(tsx@4.20.5)(yaml@2.8.1))
       dotenv:
-        specifier: 16.6.1
-        version: 16.6.1
+        specifier: 17.2.3
+        version: 17.2.3
       jsdom:
         specifier: ^27.0.0
         version: 27.0.0(postcss@8.5.6)
@@ -4628,8 +4628,8 @@ packages:
     resolution: {integrity: sha512-1gxPBJpI/pcjQhKgIU91II6Wkay+dLcN3M6rf2uwP8hRur3HtQXjVrdAK3sjC0piaEuxzMwjXChcETiJl47lAQ==}
     engines: {node: '>=18'}
 
-  dotenv@16.6.1:
-    resolution: {integrity: sha512-uBq4egWHTcTt33a72vpSG0z3HnPuIl6NqYcTrKEg2azoEyl2hpW0zqlxysq2pK9HlDIHyHyakeYaYnSAwd8bow==}
+  dotenv@17.2.3:
+    resolution: {integrity: sha512-JVUnt+DUIzu87TABbhPmNfVdBDt18BLOWjMUFJMSi/Qqg7NTYtabbvSNJGOJ7afbRuv9D/lngizHtP7QyLQ+9w==}
     engines: {node: '>=12'}
 
   dottie@2.0.6:
@@ -11823,7 +11823,7 @@ snapshots:
     dependencies:
       type-fest: 4.30.2
 
-  dotenv@16.6.1: {}
+  dotenv@17.2.3: {}
 
   dottie@2.0.6: {}