diff --git a/backend/package-lock.json b/backend/package-lock.json
index b1d1db4..bb89ba2 100644
--- a/backend/package-lock.json
+++ b/backend/package-lock.json
@@ -16,7 +16,7 @@
         "@prisma/adapter-pg": "^7.10.1",
         "@prisma/client": "^7.10.1",
         "blurhash": "^2.0.5",
-        "dotenv": "^18.0.8",
+        "dotenv": "^18.0.9",
         "fastify": "^5.12.7",
         "openid-client": "^6.8.8",
         "pg": "^8.23.1",
@@ -3364,9 +3364,9 @@
       }
     },
     "node_modules/dotenv": {
-      "version": "18.0.8",
-      "resolved": "https://registry.npmjs.org/dotenv/-/dotenv-18.0.8.tgz",
-      "integrity": "sha512-2KDeoFoK/zRtcnbunCDlLG5VWVMcyqeQc6iK65o231nfNAcuGrKoqUQfJFUtBI+QlShk5HKIHxwebBtUl3rEfA==",
+      "version": "18.0.9",
+      "resolved": "https://registry.npmjs.org/dotenv/-/dotenv-18.0.9.tgz",
+      "integrity": "sha512-3fVOW4cB02R066PUSwn8O4TJyz9NckQl7F81blIbaq9jKBm2tSmOKky7ZHIXzGvkVPXCSn6jkpziBPZdGFs8Tw==",
       "license": "BSD-2-Clause",
       "bin": {
         "dotenv": "dist/index.cjs"
diff --git a/backend/package.json b/backend/package.json
index 33d2bd3..b2f55bd 100644
--- a/backend/package.json
+++ b/backend/package.json
@@ -25,7 +25,7 @@
     "@prisma/adapter-pg": "^7.10.1",
     "@prisma/client": "^7.10.1",
     "blurhash": "^2.0.5",
-    "dotenv": "^18.0.8",
+    "dotenv": "^18.0.9",
     "fastify": "^5.12.7",
     "openid-client": "^6.8.8",
     "pg": "^8.23.1",