diff --git a/package-lock.json b/package-lock.json
index 913d893..3d411da 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1113,9 +1113,9 @@
       }
     },
     "dotenv": {
-      "version": "8.6.0",
-      "resolved": "https://registry.npmjs.org/dotenv/-/dotenv-8.6.0.tgz",
-      "integrity": "sha512-IrPdXQsk2BbzvCBGBOTmmSH5SodmqZNt4ERAZDmW4CT+tL8VtvinqywuANaFu4bOMWki16nqf0e4oC0QIaDr/g=="
+      "version": "16.0.3",
+      "resolved": "https://registry.npmjs.org/dotenv/-/dotenv-16.0.3.tgz",
+      "integrity": "sha512-7GO6HghkA5fYG9TYnNxi14/7K9f5occMlp3zXAuSxn7CKCxt9xbNWG7yF8hTCSUchlfWSe3uLmlPfigevRItzQ=="
     },
     "duplexer": {
       "version": "0.1.2",
diff --git a/package.json b/package.json
index f65296a..ac53219 100644
--- a/package.json
+++ b/package.json
@@ -30,7 +30,7 @@
     "config-parser"
   ],
   "dependencies": {
-    "dotenv": "^8.6.0"
+    "dotenv": "^16.0.3"
   },
   "devDependencies": {
     "@betahuhn/config": "^1.1.0",