diff --git a/package-lock.json b/package-lock.json
index 5f8dc5f..bde3a7c 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -14,7 +14,7 @@
         "cors": "^2.8.6",
         "date-fns": "^4.4.0",
         "dompurify": "^3.4.17",
-        "dotenv": "^18.0.7",
+        "dotenv": "^18.0.8",
         "eventsource": "^5.1.3",
         "eventsource-parser": "^3.1.1",
         "express": "^5.3.0",
@@ -5422,9 +5422,9 @@
       }
     },
     "node_modules/dotenv": {
-      "version": "18.0.7",
-      "resolved": "https://registry.npmjs.org/dotenv/-/dotenv-18.0.7.tgz",
-      "integrity": "sha512-QEvMEF8ca3GNZJJnAbOgxpj5ULhBvnMcURp+XKrtvqFNPgjBvYoswQ0Jl2cO7JzCjxZjJhr9ZuIEhlrRxMft/Q==",
+      "version": "18.0.8",
+      "resolved": "https://registry.npmjs.org/dotenv/-/dotenv-18.0.8.tgz",
+      "integrity": "sha512-2KDeoFoK/zRtcnbunCDlLG5VWVMcyqeQc6iK65o231nfNAcuGrKoqUQfJFUtBI+QlShk5HKIHxwebBtUl3rEfA==",
       "license": "BSD-2-Clause",
       "bin": {
         "dotenv": "dist/index.cjs"
diff --git a/package.json b/package.json
index e4e5689..b6c5e93 100644
--- a/package.json
+++ b/package.json
@@ -26,7 +26,7 @@
     "cors": "^2.8.6",
     "date-fns": "^4.4.0",
     "dompurify": "^3.4.17",
-    "dotenv": "^18.0.7",
+    "dotenv": "^18.0.8",
     "eventsource": "^5.1.3",
     "eventsource-parser": "^3.1.1",
     "express": "^5.3.0",