diff --git a/services/idp/package.json b/services/idp/package.json
index ded999bfd5..d1f602476e 100644
--- a/services/idp/package.json
+++ b/services/idp/package.json
@@ -115,7 +115,7 @@
     "cldr": "^7.9.0",
     "css-loader": "^7.1.4",
     "css-minimizer-webpack-plugin": "^8.0.0",
-    "dotenv": "16.4.7",
+    "dotenv": "17.4.2",
     "dotenv-expand": "^12.0.3",
     "eslint": "^7.32.0",
     "eslint-config-react-app": "^6.0.0",
diff --git a/services/idp/pnpm-lock.yaml b/services/idp/pnpm-lock.yaml
index 38860fa4fa..b8c4977ea4 100644
--- a/services/idp/pnpm-lock.yaml
+++ b/services/idp/pnpm-lock.yaml
@@ -139,8 +139,8 @@ importers:
         specifier: ^8.0.0
         version: 8.0.0(webpack@5.105.2)
       dotenv:
-        specifier: 16.4.7
-        version: 16.4.7
+        specifier: 17.4.2
+        version: 17.4.2
       dotenv-expand:
         specifier: ^12.0.3
         version: 12.0.3
@@ -2974,6 +2974,10 @@ packages:
     resolution: {integrity: sha512-47qPchRCykZC03FhkYAhrvwU4xDBFIj1QPqaarj6mdM/hgUzfPHcpkHJOn3mJAufFeeAxAzeGsr5X0M4k6fLZQ==}
     engines: {node: '>=12'}
 
+  dotenv@17.4.2:
+    resolution: {integrity: sha512-nI4U3TottKAcAD9LLud4Cb7b2QztQMUEfHbvhTH09bqXTxnSie8WnjPALV/WMCrJZ6UV/qHJ6L03OqO3LcdYZw==}
+    engines: {node: '>=12'}
+
   dunder-proto@1.0.1:
     resolution: {integrity: sha512-KIN/nDJBQRcXw0MLVhZE9iQHmG68qAVIBg9CqmUYjmQIhgij9U5MFvrqkUL5FbtyyzZuOeOt0zdeRe4UY7ct+A==}
     engines: {node: '>= 0.4'}
@@ -9477,6 +9481,8 @@ snapshots:
 
   dotenv@16.4.7: {}
 
+  dotenv@17.4.2: {}
+
   dunder-proto@1.0.1:
     dependencies:
       call-bind-apply-helpers: 1.0.2