diff --git a/config/dependencies.yaml b/config/dependencies.yaml
index 92f2c167760..32d1dae1297 100644
--- a/config/dependencies.yaml
+++ b/config/dependencies.yaml
@@ -192,7 +192,7 @@ backend:
     'bcryptjs': '2.4.3'
     'cors': '2.8.5'
     'crypto': '1.0.1'
-    'dotenv': '16.1.1'
+    'dotenv': '16.1.3'
     'express': '4.18.2'
     'js-yaml': *jsyaml
     'lodash.get': *_get
diff --git a/sites/backend/package.json b/sites/backend/package.json
index 789fbf58484..37989cd71a2 100644
--- a/sites/backend/package.json
+++ b/sites/backend/package.json
@@ -33,7 +33,7 @@
     "bcryptjs": "2.4.3",
     "cors": "2.8.5",
     "crypto": "1.0.1",
-    "dotenv": "16.1.1",
+    "dotenv": "16.1.3",
     "express": "4.18.2",
     "js-yaml": "4.1.0",
     "lodash.get": "4.4.2",
diff --git a/yarn.lock b/yarn.lock
index ed230928ff0..42049b3d459 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -7759,10 +7759,10 @@ dot-prop@^5.1.0, dot-prop@^5.2.0:
   dependencies:
     is-obj "^2.0.0"
 
-dotenv@16.1.1:
-  version "16.1.1"
-  resolved "https://registry.yarnpkg.com/dotenv/-/dotenv-16.1.1.tgz#9105a6c486ab66076231fbe7cf4ba77131a61d65"
-  integrity sha512-UGmzIqXU/4b6Vb3R1Vrfd/4vGgVlB+mO+vEixOdfRhLeppkyW2BMhuK7TL8d0el+q9c4lW9qK2wZYhNLFhXYLA==
+dotenv@16.1.3:
+  version "16.1.3"
+  resolved "https://registry.yarnpkg.com/dotenv/-/dotenv-16.1.3.tgz#0c67e90d0ddb48d08c570888f709b41844928210"
+  integrity sha512-FYssxsmCTtKL72fGBSvb1K9dRz0/VZeWqFme/vSb7r7323x4CRaHu4LvQ5JG3+s6yt2YPbBrkpiEODktfyjI9A==
 
 dotenv@~10.0.0:
   version "10.0.0"