diff --git a/package.json b/package.json
index f953c1f2f..17c9700ad 100644
--- a/package.json
+++ b/package.json
@@ -12,7 +12,7 @@
     "axios": "1.18.1",
     "cos-js-sdk-v5": "1.10.1",
     "dayjs": "1.11.13",
-    "dotenv": "17.4.2",
+    "dotenv": "18.0.7",
     "google-protobuf": "4.0.2",
     "graphql": "17.0.2",
     "graphql-ws": "6.1.1",
diff --git a/yarn.lock b/yarn.lock
index 60b774571..409d27d9f 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -6813,10 +6813,10 @@ dotenv-expand@^5.1.0:
   resolved "https://registry.npmjs.org/dotenv-expand/-/dotenv-expand-5.1.0.tgz"
   integrity sha512-YXQl1DSa4/PQyRfgrv6aoNjhasp/p4qs9FjJ4q4cQk+8m4r6k4ZSiEyytKG8f8W9gi8WsQtIObNmKd+tMzNTmA==
 
-dotenv@17.4.2:
-  version "17.4.2"
-  resolved "https://registry.yarnpkg.com/dotenv/-/dotenv-17.4.2.tgz#c07e54a746e11eba021dd9e1047ced5afdc1c034"
-  integrity sha512-nI4U3TottKAcAD9LLud4Cb7b2QztQMUEfHbvhTH09bqXTxnSie8WnjPALV/WMCrJZ6UV/qHJ6L03OqO3LcdYZw==
+dotenv@18.0.7:
+  version "18.0.7"
+  resolved "https://registry.yarnpkg.com/dotenv/-/dotenv-18.0.7.tgz#ee6bec88c59298d9b218acdf49377f2c110a7698"
+  integrity sha512-QEvMEF8ca3GNZJJnAbOgxpj5ULhBvnMcURp+XKrtvqFNPgjBvYoswQ0Jl2cO7JzCjxZjJhr9ZuIEhlrRxMft/Q==
 
 dotenv@^10.0.0:
   version "10.0.0"