diff --git a/package.json b/package.json
index 484d3b5c..87ea604b 100644
--- a/package.json
+++ b/package.json
@@ -29,7 +29,7 @@
     "chart.js": "^4.3.3",
     "color-convert": "^2.0.1",
     "cross-env": "^7.0.3",
-    "dotenv": "^16.4.2",
+    "dotenv": "^18.0.4",
     "echarts": "^5.4.3",
     "events": "3.3.0",
     "fabric": "^5.3.0",
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index bbf91abf..0d296ddf 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -200,8 +200,8 @@ importers:
         specifier: ^7.0.3
         version: 7.0.3
       dotenv:
-        specifier: ^16.4.2
-        version: 16.6.1
+        specifier: ^18.0.4
+        version: 18.0.5
       echarts:
         specifier: ^5.4.3
         version: 5.6.0
@@ -2827,9 +2827,10 @@ packages:
     resolution: {integrity: sha512-rlBi9d8jpv9Sf1klPjNfFAuWDjKLwTIJJ/VxtoTwIR6hnZxcEOQCZg2oIL3MWBYw5GpUDKOEnND7LXTbIpQ03Q==}
     engines: {node: '>=10'}
 
-  dotenv@16.6.1:
-    resolution: {integrity: sha512-uBq4egWHTcTt33a72vpSG0z3HnPuIl6NqYcTrKEg2azoEyl2hpW0zqlxysq2pK9HlDIHyHyakeYaYnSAwd8bow==}
+  dotenv@18.0.5:
+    resolution: {integrity: sha512-aBrGvt6KhjxbEnatqMWOMidftwsrCiCvqh1yNIGB9QyF0J+VcWkKDMsvYOEm7ZS82oiV+BT1sTOtIlAmUlTpwQ==}
     engines: {node: '>=12'}
+    hasBin: true
 
   dragula@3.7.3:
     resolution: {integrity: sha512-/rRg4zRhcpf81TyDhaHLtXt6sEywdfpv1cRUMeFFy7DuypH2U0WUL0GTdyAQvXegviT4PJK4KuMmOaIDpICseQ==}
@@ -9365,7 +9366,7 @@ snapshots:
 
   dotenv@10.0.0: {}
 
-  dotenv@16.6.1: {}
+  dotenv@18.0.5: {}
 
   dragula@3.7.3:
     dependencies: