diff --git a/package.json b/package.json
index a0887558..201ffee8 100644
--- a/package.json
+++ b/package.json
@@ -33,7 +33,7 @@
     "compression": "^1.7.4",
     "cors": "^2.8.5",
     "debug": "^3.1.0",
-    "dotenv": "^8.1.0",
+    "dotenv": "^16.0.3",
     "eccrypto": "^1.1.6",
     "express": "^4.14.1",
     "express-session": "^1.17.1",
diff --git a/yarn.lock b/yarn.lock
index 9951dd5f..4f6fc1af 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -2512,10 +2512,10 @@ dot-prop@^5.2.0:
   dependencies:
     is-obj "^2.0.0"
 
-dotenv@^8.1.0:
-  version "8.6.0"
-  resolved "https://registry.yarnpkg.com/dotenv/-/dotenv-8.6.0.tgz#061af664d19f7f4d8fc6e4ff9b584ce237adcb8b"
-  integrity sha512-IrPdXQsk2BbzvCBGBOTmmSH5SodmqZNt4ERAZDmW4CT+tL8VtvinqywuANaFu4bOMWki16nqf0e4oC0QIaDr/g==
+dotenv@^16.0.3:
+  version "16.0.3"
+  resolved "https://registry.yarnpkg.com/dotenv/-/dotenv-16.0.3.tgz#115aec42bac5053db3c456db30cc243a5a836a07"
+  integrity sha512-7GO6HghkA5fYG9TYnNxi14/7K9f5occMlp3zXAuSxn7CKCxt9xbNWG7yF8hTCSUchlfWSe3uLmlPfigevRItzQ==
 
 drbg.js@^1.0.1:
   version "1.0.1"