diff --git a/package-lock.json b/package-lock.json
index 25fe8bc..3a9c070 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -13,7 +13,7 @@
         "@modelcontextprotocol/node": "^2.1.1",
         "@modelcontextprotocol/server": "^2.3.1",
         "busboy": "^1.6.0",
-        "dotenv": "^18.0.6",
+        "dotenv": "^18.0.7",
         "express": "^5.2.1",
         "express-rate-limit": "^8.7.1",
         "jose": "^6.2.12",
@@ -1571,9 +1571,9 @@
       }
     },
     "node_modules/dotenv": {
-      "version": "18.0.6",
-      "resolved": "https://registry.npmjs.org/dotenv/-/dotenv-18.0.6.tgz",
-      "integrity": "sha512-ZMVmohV6CvAJtj++pZNyggluUt6hbRdQAxc2+Z635RL6/AG/ruXv5lHnybUFoxMPL/yrTL/tsF4paZu2l7RA6Q==",
+      "version": "18.0.7",
+      "resolved": "https://registry.npmjs.org/dotenv/-/dotenv-18.0.7.tgz",
+      "integrity": "sha512-QEvMEF8ca3GNZJJnAbOgxpj5ULhBvnMcURp+XKrtvqFNPgjBvYoswQ0Jl2cO7JzCjxZjJhr9ZuIEhlrRxMft/Q==",
       "license": "BSD-2-Clause",
       "bin": {
         "dotenv": "dist/index.cjs"
diff --git a/package.json b/package.json
index fab631a..09cd04f 100644
--- a/package.json
+++ b/package.json
@@ -30,7 +30,7 @@
     "@modelcontextprotocol/node": "^2.1.1",
     "@modelcontextprotocol/server": "^2.3.1",
     "busboy": "^1.6.0",
-    "dotenv": "^18.0.6",
+    "dotenv": "^18.0.7",
     "express": "^5.2.1",
     "express-rate-limit": "^8.7.1",
     "jose": "^6.2.12",