diff --git a/cli/package.json b/cli/package.json
index d23b4841e0..ff332334e3 100644
--- a/cli/package.json
+++ b/cli/package.json
@@ -45,7 +45,7 @@
     "@commander-js/extra-typings": "^12.0.0",
     "@nomicfoundation/hardhat-toolbox": "^4.0.0",
     "commander": "^12.0.0",
-    "dotenv": "^16.4.2",
+    "dotenv": "^16.4.4",
     "ethers": "^6.11.0",
     "hardhat": "^2.19.5",
     "maci-circuits": "^1.1.2",
diff --git a/contracts/package.json b/contracts/package.json
index dce749b6d1..10b0bd5bf4 100644
--- a/contracts/package.json
+++ b/contracts/package.json
@@ -85,7 +85,7 @@
     "@types/node": "^20.11.17",
     "@types/snarkjs": "^0.7.8",
     "chai": "^4.3.10",
-    "dotenv": "^16.4.2",
+    "dotenv": "^16.4.4",
     "hardhat-artifactor": "^0.2.0",
     "hardhat-contract-sizer": "^2.10.0",
     "lowdb": "^1.0.0",
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index c6f2a6bc75..5c7061a497 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -157,8 +157,8 @@ importers:
         specifier: ^12.0.0
         version: 12.0.0
       dotenv:
-        specifier: ^16.4.2
-        version: 16.4.2
+        specifier: ^16.4.4
+        version: 16.4.4
       ethers:
         specifier: ^6.11.0
         version: 6.11.0
@@ -279,8 +279,8 @@ importers:
         specifier: ^4.3.10
         version: 4.4.0
       dotenv:
-        specifier: ^16.4.2
-        version: 16.4.2
+        specifier: ^16.4.4
+        version: 16.4.4
       hardhat-artifactor:
         specifier: ^0.2.0
         version: 0.2.0(hardhat@2.19.5)
@@ -8595,8 +8595,8 @@ packages:
     engines: {node: '>=12'}
     dev: true
 
-  /dotenv@16.4.2:
-    resolution: {integrity: sha512-rZSSFxke7d9nYQ5NeMIwp5PP+f8wXgKNljpOb7KtH6SKW1cEqcXAz9VSJYVLKe7Jhup/gUYOkaeSVyK8GJ+nBg==}
+  /dotenv@16.4.4:
+    resolution: {integrity: sha512-XvPXc8XAQThSjAbY6cQ/9PcBXmFoWuw1sQ3b8HqUCR6ziGXjkTi//kB9SWa2UwqlgdAIuRqAa/9hVljzPehbYg==}
     engines: {node: '>=12'}
 
   /duplexer@0.1.2:
@@ -9446,7 +9446,6 @@ packages:
     dependencies:
       is-hex-prefixed: 1.0.0
       strip-hex-prefix: 1.0.0
-    bundledDependencies: false
 
   /eval@0.1.8:
     resolution: {integrity: sha512-EzV94NYKoO09GLXGjXj9JIlXijVck4ONSr5wiCWDvhsvj5jxSrzTmRU/9C1DyB6uToszLs8aifA6NQ7lEQdvFw==}