diff --git a/apps/cli/package.json b/apps/cli/package.json
index 4531ed45..9b4ca833 100644
--- a/apps/cli/package.json
+++ b/apps/cli/package.json
@@ -30,7 +30,7 @@
     "@clack/prompts": "^1.8.1",
     "commander": "^15.0.0",
     "consola": "^3.4.2",
-    "dotenv": "^17.4.2",
+    "dotenv": "^18.0.3",
     "jiti": "^2.7.0",
     "nypm": "^0.6.10",
     "posthog-node": "~5.52.5"
diff --git a/package-lock.json b/package-lock.json
index 61e60716..a25ce577 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -51,7 +51,7 @@
         "@clack/prompts": "^1.8.1",
         "commander": "^15.0.0",
         "consola": "^3.4.2",
-        "dotenv": "^17.4.2",
+        "dotenv": "^18.0.3",
         "jiti": "^2.7.0",
         "nypm": "^0.6.10",
         "posthog-node": "~5.52.5"
@@ -76,6 +76,21 @@
         "node": ">=22.12.0"
       }
     },
+    "apps/cli/node_modules/dotenv": {
+      "version": "18.0.3",
+      "resolved": "https://registry.npmjs.org/dotenv/-/dotenv-18.0.3.tgz",
+      "integrity": "sha512-/8CJTyL817qPnfbQrJgOEcrU3fDrJkRIoXBE566wHuvIXKOCHUZhPqGPbCPi9SogjdGnreF0TlvnTgK6J/8zpA==",
+      "license": "BSD-2-Clause",
+      "bin": {
+        "dotenv": "dist/index.cjs"
+      },
+      "engines": {
+        "node": ">=12"
+      },
+      "funding": {
+        "url": "https://dotenvx.com"
+      }
+    },
     "apps/cli/node_modules/jiti": {
       "version": "2.7.0",
       "resolved": "https://registry.npmjs.org/jiti/-/jiti-2.7.0.tgz",