diff --git a/scripts/package.json b/scripts/package.json
index 7bfe7041607..cd76f227b02 100644
--- a/scripts/package.json
+++ b/scripts/package.json
@@ -35,7 +35,7 @@
     "chalk": "5.4.1",
     "commander": "14.0.0",
     "crc": "4.3.2",
-    "dotenv": "16.5.0",
+    "dotenv": "16.6.1",
     "esbuild": "0.25.5",
     "execa": "9.6.0",
     "express": "5.1.0",
diff --git a/templates/javascript/tests/package.mustache b/templates/javascript/tests/package.mustache
index 775d5e4784f..ff9e0681c8a 100644
--- a/templates/javascript/tests/package.mustache
+++ b/templates/javascript/tests/package.mustache
@@ -13,7 +13,7 @@
   },
   "devDependencies": {
     "@types/node": "22.15.32",
-    "dotenv": "16.5.0",
+    "dotenv": "16.6.1",
     "typescript": "5.8.3",
     "vitest": "3.2.4"
   }
diff --git a/yarn.lock b/yarn.lock
index 397afe129a7..1827d6e77dd 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -3661,10 +3661,10 @@ __metadata:
   languageName: node
   linkType: hard
 
-"dotenv@npm:16.5.0":
-  version: 16.5.0
-  resolution: "dotenv@npm:16.5.0"
-  checksum: 10/e68a16834f1a41cc2dfb01563bc150668ad675e6cd09191211467b5c0806b6ecd6ec438e021aa8e01cd0e72d2b70ef4302bec7cc0fe15b6955f85230b62dc8a9
+"dotenv@npm:16.6.1":
+  version: 16.6.1
+  resolution: "dotenv@npm:16.6.1"
+  checksum: 10/1d1897144344447ffe62aa1a6d664f4cd2e0784e0aff787eeeec1940ded32f8e4b5b506d665134fc87157baa086fce07ec6383970a2b6d2e7985beaed6a4cc14
   languageName: node
   linkType: hard
 
@@ -7419,7 +7419,7 @@ __metadata:
     chalk: "npm:5.4.1"
     commander: "npm:14.0.0"
     crc: "npm:4.3.2"
-    dotenv: "npm:16.5.0"
+    dotenv: "npm:16.6.1"
     esbuild: "npm:0.25.5"
     execa: "npm:9.6.0"
     express: "npm:5.1.0"