diff --git a/packages/dev-cli/package.json b/packages/dev-cli/package.json
index 078098eea47..6a77669275b 100644
--- a/packages/dev-cli/package.json
+++ b/packages/dev-cli/package.json
@@ -26,7 +26,7 @@
   "dependencies": {
     "commander": "^14.0.1",
     "concurrently": "^9.2.1",
-    "dotenv": "^17.2.2",
+    "dotenv": "^17.2.3",
     "globby": "^14.1.0",
     "jscodeshift": "^17.3.0"
   },
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index dc0e745adef..26315e08c81 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -562,8 +562,8 @@ importers:
         specifier: ^9.2.1
         version: 9.2.1
       dotenv:
-        specifier: ^17.2.2
-        version: 17.2.2
+        specifier: ^17.2.3
+        version: 17.2.3
       globby:
         specifier: ^14.1.0
         version: 14.1.0
@@ -7737,6 +7737,10 @@ packages:
     resolution: {integrity: sha512-Sf2LSQP+bOlhKWWyhFsn0UsfdK/kCWRv1iuA2gXAwt3dyNabr6QSj00I2V10pidqz69soatm9ZwZvpQMTIOd5Q==}
     engines: {node: '>=12'}
 
+  dotenv@17.2.3:
+    resolution: {integrity: sha512-JVUnt+DUIzu87TABbhPmNfVdBDt18BLOWjMUFJMSi/Qqg7NTYtabbvSNJGOJ7afbRuv9D/lngizHtP7QyLQ+9w==}
+    engines: {node: '>=12'}
+
   dset@3.1.4:
     resolution: {integrity: sha512-2QF/g9/zTaPDc3BjNcVTGoBbXBgYfMTTceLaYcFJ/W9kggFUkhxD/hMEeuLKbugyef9SqAx8cpgwlIP/jinUTA==}
     engines: {node: '>=4'}
@@ -21915,7 +21919,7 @@ snapshots:
       chokidar: 4.0.3
       confbox: 0.2.2
       defu: 6.1.4
-      dotenv: 17.2.2
+      dotenv: 17.2.3
       exsolve: 1.0.7
       giget: 2.0.0
       jiti: 2.5.1
@@ -23097,6 +23101,8 @@ snapshots:
 
   dotenv@17.2.2: {}
 
+  dotenv@17.2.3: {}
+
   dset@3.1.4: {}
 
   dunder-proto@1.0.1: