diff --git a/package-lock.json b/package-lock.json
index bbdf5a7a9..055755e62 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -24,7 +24,7 @@
         "d3-hexbin": "^0.2.2",
         "d3-scale": "^4.0.2",
         "debug": "^4.4.1",
-        "dotenv": "^17.2.3",
+        "dotenv": "^18.0.4",
         "esbuild": "^0.25.9",
         "events": "^3.3.0",
         "express": "^4.21.2",
@@ -9609,10 +9609,13 @@
       }
     },
     "node_modules/dotenv": {
-      "version": "17.4.2",
-      "resolved": "https://registry.npmjs.org/dotenv/-/dotenv-17.4.2.tgz",
-      "integrity": "sha512-nI4U3TottKAcAD9LLud4Cb7b2QztQMUEfHbvhTH09bqXTxnSie8WnjPALV/WMCrJZ6UV/qHJ6L03OqO3LcdYZw==",
+      "version": "18.0.4",
+      "resolved": "https://registry.npmjs.org/dotenv/-/dotenv-18.0.4.tgz",
+      "integrity": "sha512-jGt9uI5BIxpVO15kvy+iEFqNAwxYClKWnkptLjSNPnFLC003Imd0ofr3aEVsbpHdSBdSsbcApNIlz4nbyGMwdA==",
       "license": "BSD-2-Clause",
+      "bin": {
+        "dotenv": "dist/index.cjs"
+      },
       "engines": {
         "node": ">=12"
       },
diff --git a/package.json b/package.json
index 5e4abf037..bab44dac1 100644
--- a/package.json
+++ b/package.json
@@ -22,7 +22,7 @@
     "d3-hexbin": "^0.2.2",
     "d3-scale": "^4.0.2",
     "debug": "^4.4.1",
-    "dotenv": "^17.2.3",
+    "dotenv": "^18.0.4",
     "esbuild": "^0.25.9",
     "events": "^3.3.0",
     "express": "^4.21.2",