diff --git a/services/idp/package.json b/services/idp/package.json
index 68245216ad..32dabbd76a 100644
--- a/services/idp/package.json
+++ b/services/idp/package.json
@@ -115,7 +115,7 @@
     "case-sensitive-paths-webpack-plugin": "2.3.0",
     "cldr": "^7.1.1",
     "css-loader": "4.3.0",
-    "dotenv": "8.2.0",
+    "dotenv": "16.3.1",
     "dotenv-expand": "10.0.0",
     "eslint": "^7.11.0",
     "eslint-config-react-app": "^6.0.0",
diff --git a/services/idp/pnpm-lock.yaml b/services/idp/pnpm-lock.yaml
index ffa441ff77..6518269530 100644
--- a/services/idp/pnpm-lock.yaml
+++ b/services/idp/pnpm-lock.yaml
@@ -134,8 +134,8 @@ devDependencies:
     specifier: 4.3.0
     version: 4.3.0(webpack@4.46.0)
   dotenv:
-    specifier: 8.2.0
-    version: 8.2.0
+    specifier: 16.3.1
+    version: 16.3.1
   dotenv-expand:
     specifier: 10.0.0
     version: 10.0.0
@@ -5542,9 +5542,9 @@ packages:
     engines: {node: '>=12'}
     dev: true
 
-  /dotenv@8.2.0:
-    resolution: {integrity: sha512-8sJ78ElpbDJBHNeBzUbUVLsqKdccaa/BXF1uPTw3GrvQTBgrQrtObr2mUrE38vzYd8cEv+m/JBfDLioYcfXoaw==}
-    engines: {node: '>=8'}
+  /dotenv@16.3.1:
+    resolution: {integrity: sha512-IPzF4w4/Rd94bA9imS68tZBaYyBWSCE47V1RGuMrB94iyTOIEwRmVL2x/4An+6mETpLrKJ5hQkB8W4kFAadeIQ==}
+    engines: {node: '>=12'}
     dev: true
 
   /duplexer@0.1.2: