diff --git a/package-lock.json b/package-lock.json
index 56d7880..e13ed44 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -13,7 +13,7 @@
         "@actions/github": "^5.1.1",
         "@github/dependency-submission-toolkit": "^1.2.10",
         "cross-fetch": "^3.1.5",
-        "dotenv": "^16.0.3",
+        "dotenv": "^16.4.5",
         "fs": "^0.0.1-security",
         "tar": "^6.2.1",
         "yaml": "^2.2.2"
@@ -2059,11 +2059,14 @@
       }
     },
     "node_modules/dotenv": {
-      "version": "16.0.3",
-      "resolved": "https://registry.npmjs.org/dotenv/-/dotenv-16.0.3.tgz",
-      "integrity": "sha512-7GO6HghkA5fYG9TYnNxi14/7K9f5occMlp3zXAuSxn7CKCxt9xbNWG7yF8hTCSUchlfWSe3uLmlPfigevRItzQ==",
+      "version": "16.4.5",
+      "resolved": "https://registry.npmjs.org/dotenv/-/dotenv-16.4.5.tgz",
+      "integrity": "sha512-ZmdL2rui+eB2YwhsWzjInR8LldtZHGDoQ1ugH85ppHKwpUHL7j7rN0Ti9NCnGiQbhaZ11FpR+7ao1dNsmduNUg==",
       "engines": {
         "node": ">=12"
+      },
+      "funding": {
+        "url": "https://dotenvx.com"
       }
     },
     "node_modules/electron-to-chromium": {
@@ -6473,9 +6476,9 @@
       }
     },
     "dotenv": {
-      "version": "16.0.3",
-      "resolved": "https://registry.npmjs.org/dotenv/-/dotenv-16.0.3.tgz",
-      "integrity": "sha512-7GO6HghkA5fYG9TYnNxi14/7K9f5occMlp3zXAuSxn7CKCxt9xbNWG7yF8hTCSUchlfWSe3uLmlPfigevRItzQ=="
+      "version": "16.4.5",
+      "resolved": "https://registry.npmjs.org/dotenv/-/dotenv-16.4.5.tgz",
+      "integrity": "sha512-ZmdL2rui+eB2YwhsWzjInR8LldtZHGDoQ1ugH85ppHKwpUHL7j7rN0Ti9NCnGiQbhaZ11FpR+7ao1dNsmduNUg=="
     },
     "electron-to-chromium": {
       "version": "1.4.284",
diff --git a/package.json b/package.json
index d3a459e..08675ae 100644
--- a/package.json
+++ b/package.json
@@ -29,7 +29,7 @@
     "@actions/github": "^5.1.1",
     "@github/dependency-submission-toolkit": "^1.2.10",
     "cross-fetch": "^3.1.5",
-    "dotenv": "^16.0.3",
+    "dotenv": "^16.4.5",
     "fs": "^0.0.1-security",
     "tar": "^6.2.1",
     "yaml": "^2.2.2"