diff --git a/admin-scripts/package-lock.json b/admin-scripts/package-lock.json
index c2134620..a3b85cb0 100644
--- a/admin-scripts/package-lock.json
+++ b/admin-scripts/package-lock.json
@@ -2344,9 +2344,9 @@
       }
     },
     "dotenv": {
-      "version": "8.6.0",
-      "resolved": "https://registry.npmjs.org/dotenv/-/dotenv-8.6.0.tgz",
-      "integrity": "sha512-IrPdXQsk2BbzvCBGBOTmmSH5SodmqZNt4ERAZDmW4CT+tL8VtvinqywuANaFu4bOMWki16nqf0e4oC0QIaDr/g=="
+      "version": "17.3.1",
+      "resolved": "https://registry.npmjs.org/dotenv/-/dotenv-17.3.1.tgz",
+      "integrity": "sha512-IO8C/dzEb6O3F9/twg6ZLXz164a2fhTnEWb95H23Dm4OuN+92NmEAlTrupP9VW6Jm3sO26tQlqyvyi4CsnY9GA=="
     },
     "duplexer2": {
       "version": "0.1.4",
diff --git a/admin-scripts/package.json b/admin-scripts/package.json
index d43ee288..4b6b65e2 100644
--- a/admin-scripts/package.json
+++ b/admin-scripts/package.json
@@ -3,7 +3,7 @@
   "version": "1.7.1",
   "description": "Siros admin scripts (command line)",
   "dependencies": {
-    "dotenv": "8.6.0",
+    "dotenv": "17.3.1",
     "pdfmake": "0.2.4",
     "pg": "8.7.1",
     "pg-promise": "10.11.1",
diff --git a/api-server/package-lock.json b/api-server/package-lock.json
index 95d89179..bddad436 100644
--- a/api-server/package-lock.json
+++ b/api-server/package-lock.json
@@ -956,9 +956,9 @@
       }
     },
     "dotenv": {
-      "version": "8.6.0",
-      "resolved": "https://registry.npmjs.org/dotenv/-/dotenv-8.6.0.tgz",
-      "integrity": "sha512-IrPdXQsk2BbzvCBGBOTmmSH5SodmqZNt4ERAZDmW4CT+tL8VtvinqywuANaFu4bOMWki16nqf0e4oC0QIaDr/g=="
+      "version": "17.3.1",
+      "resolved": "https://registry.npmjs.org/dotenv/-/dotenv-17.3.1.tgz",
+      "integrity": "sha512-IO8C/dzEb6O3F9/twg6ZLXz164a2fhTnEWb95H23Dm4OuN+92NmEAlTrupP9VW6Jm3sO26tQlqyvyi4CsnY9GA=="
     },
     "duplexer3": {
       "version": "0.1.4",
diff --git a/api-server/package.json b/api-server/package.json
index 1ea512af..8fbf7cfc 100644
--- a/api-server/package.json
+++ b/api-server/package.json
@@ -15,7 +15,7 @@
   "repository": "git@github.com:salsita/siros-postgres.git",
   "dependencies": {
     "@koa/router": "10.1.1",
-    "dotenv": "8.6.0",
+    "dotenv": "17.3.1",
     "koa": "2.13.4",
     "koa-bodyparser": "4.3.0",
     "koa-compress": "5.1.0",
diff --git a/db-schema/package-lock.json b/db-schema/package-lock.json
index 9852c1ea..6ec0d26f 100644
--- a/db-schema/package-lock.json
+++ b/db-schema/package-lock.json
@@ -597,9 +597,9 @@
       }
     },
     "dotenv": {
-      "version": "8.6.0",
-      "resolved": "https://registry.npmjs.org/dotenv/-/dotenv-8.6.0.tgz",
-      "integrity": "sha512-IrPdXQsk2BbzvCBGBOTmmSH5SodmqZNt4ERAZDmW4CT+tL8VtvinqywuANaFu4bOMWki16nqf0e4oC0QIaDr/g=="
+      "version": "17.3.1",
+      "resolved": "https://registry.npmjs.org/dotenv/-/dotenv-17.3.1.tgz",
+      "integrity": "sha512-IO8C/dzEb6O3F9/twg6ZLXz164a2fhTnEWb95H23Dm4OuN+92NmEAlTrupP9VW6Jm3sO26tQlqyvyi4CsnY9GA=="
     },
     "emoji-regex": {
       "version": "8.0.0",
diff --git a/db-schema/package.json b/db-schema/package.json
index 169b02ca..aa6cf61d 100644
--- a/db-schema/package.json
+++ b/db-schema/package.json
@@ -3,7 +3,7 @@
   "version": "1.7.1",
   "description": "Siros DB schema",
   "dependencies": {
-    "dotenv": "8.6.0",
+    "dotenv": "17.3.1",
     "node-pg-migrate": "5.10.0",
     "pg": "8.7.1"
   },