diff --git a/package-lock.json b/package-lock.json
index 010444e..c5ce69f 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -13,7 +13,7 @@
         "@actions/github": "^5.1.1",
         "@github/dependency-submission-toolkit": "^1.2.10",
         "cross-fetch": "^3.1.5",
-        "dotenv": "^16.0.3",
+        "dotenv": "^16.3.1",
         "fs": "^0.0.1-security",
         "tar": "^6.1.13",
         "yaml": "^2.2.1"
@@ -2050,11 +2050,14 @@
       }
     },
     "node_modules/dotenv": {
-      "version": "16.0.3",
-      "resolved": "https://registry.npmjs.org/dotenv/-/dotenv-16.0.3.tgz",
-      "integrity": "sha512-7GO6HghkA5fYG9TYnNxi14/7K9f5occMlp3zXAuSxn7CKCxt9xbNWG7yF8hTCSUchlfWSe3uLmlPfigevRItzQ==",
+      "version": "16.3.1",
+      "resolved": "https://registry.npmjs.org/dotenv/-/dotenv-16.3.1.tgz",
+      "integrity": "sha512-IPzF4w4/Rd94bA9imS68tZBaYyBWSCE47V1RGuMrB94iyTOIEwRmVL2x/4An+6mETpLrKJ5hQkB8W4kFAadeIQ==",
       "engines": {
         "node": ">=12"
+      },
+      "funding": {
+        "url": "https://github.com/motdotla/dotenv?sponsor=1"
       }
     },
     "node_modules/electron-to-chromium": {
@@ -6487,9 +6490,9 @@
       }
     },
     "dotenv": {
-      "version": "16.0.3",
-      "resolved": "https://registry.npmjs.org/dotenv/-/dotenv-16.0.3.tgz",
-      "integrity": "sha512-7GO6HghkA5fYG9TYnNxi14/7K9f5occMlp3zXAuSxn7CKCxt9xbNWG7yF8hTCSUchlfWSe3uLmlPfigevRItzQ=="
+      "version": "16.3.1",
+      "resolved": "https://registry.npmjs.org/dotenv/-/dotenv-16.3.1.tgz",
+      "integrity": "sha512-IPzF4w4/Rd94bA9imS68tZBaYyBWSCE47V1RGuMrB94iyTOIEwRmVL2x/4An+6mETpLrKJ5hQkB8W4kFAadeIQ=="
     },
     "electron-to-chromium": {
       "version": "1.4.284",
diff --git a/package.json b/package.json
index 6b65081..fdd3838 100644
--- a/package.json
+++ b/package.json
@@ -29,7 +29,7 @@
     "@actions/github": "^5.1.1",
     "@github/dependency-submission-toolkit": "^1.2.10",
     "cross-fetch": "^3.1.5",
-    "dotenv": "^16.0.3",
+    "dotenv": "^16.3.1",
     "fs": "^0.0.1-security",
     "tar": "^6.1.13",
     "yaml": "^2.2.1"