diff --git a/web/pdf/package-lock.json b/web/pdf/package-lock.json
index 36e03c4464..b15e19dcb0 100644
--- a/web/pdf/package-lock.json
+++ b/web/pdf/package-lock.json
@@ -13,7 +13,7 @@
       },
       "devDependencies": {
         "copy-webpack-plugin": "^14.0.0",
-        "dotenv": "^17.4.2",
+        "dotenv": "^18.0.1",
         "node-stream-zip": "^1.16.0",
         "string-replace-loader": "^3.3.0",
         "terser-webpack-plugin": "^5.6.1",
@@ -632,10 +632,14 @@
       }
     },
     "node_modules/dotenv": {
-      "version": "17.4.2",
-      "resolved": "https://registry.npmjs.org/dotenv/-/dotenv-17.4.2.tgz",
-      "integrity": "sha512-nI4U3TottKAcAD9LLud4Cb7b2QztQMUEfHbvhTH09bqXTxnSie8WnjPALV/WMCrJZ6UV/qHJ6L03OqO3LcdYZw==",
+      "version": "18.0.1",
+      "resolved": "https://registry.npmjs.org/dotenv/-/dotenv-18.0.1.tgz",
+      "integrity": "sha512-0eR4m4D/jH5eaI3evo2ZqqMii5mrTCR12v12VChdie6O1gPHs7XAjzTep0CWc1Bd+oNx3vVfbi734dK4zghigw==",
       "dev": true,
+      "license": "BSD-2-Clause",
+      "bin": {
+        "dotenv": "dist/index.cjs"
+      },
       "engines": {
         "node": ">=12"
       },
@@ -2091,9 +2095,9 @@
       }
     },
     "dotenv": {
-      "version": "17.4.2",
-      "resolved": "https://registry.npmjs.org/dotenv/-/dotenv-17.4.2.tgz",
-      "integrity": "sha512-nI4U3TottKAcAD9LLud4Cb7b2QztQMUEfHbvhTH09bqXTxnSie8WnjPALV/WMCrJZ6UV/qHJ6L03OqO3LcdYZw==",
+      "version": "18.0.1",
+      "resolved": "https://registry.npmjs.org/dotenv/-/dotenv-18.0.1.tgz",
+      "integrity": "sha512-0eR4m4D/jH5eaI3evo2ZqqMii5mrTCR12v12VChdie6O1gPHs7XAjzTep0CWc1Bd+oNx3vVfbi734dK4zghigw==",
       "dev": true
     },
     "electron-to-chromium": {
diff --git a/web/pdf/package.json b/web/pdf/package.json
index 9b576c6f6a..c76a561bae 100644
--- a/web/pdf/package.json
+++ b/web/pdf/package.json
@@ -13,7 +13,7 @@
   },
   "devDependencies": {
     "copy-webpack-plugin": "^14.0.0",
-    "dotenv": "^17.4.2",
+    "dotenv": "^18.0.1",
     "node-stream-zip": "^1.16.0",
     "string-replace-loader": "^3.3.0",
     "terser-webpack-plugin": "^5.6.1",