diff --git a/package-lock.json b/package-lock.json
index 42c4bbbf..739de277 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -25,8 +25,8 @@
       "license": "Apache-2.0",
       "dependencies": {
         "@aehrc/sdc-assemble": "^1.2.0",
-        "@aehrc/sdc-populate": "^2.2.3",
-        "@aehrc/smart-forms-renderer": "^0.35.8",
+        "@aehrc/sdc-populate": "^2.2.4",
+        "@aehrc/smart-forms-renderer": "^0.35.9",
         "@emotion/react": "^11.11.4",
         "@emotion/styled": "^11.11.5",
         "@fontsource/material-icons": "^5.0.18",
@@ -18344,11 +18344,14 @@
       }
     },
     "node_modules/dotenv": {
-      "version": "16.0.3",
-      "dev": true,
-      "license": "BSD-2-Clause",
+      "version": "16.4.5",
+      "resolved": "https://registry.npmjs.org/dotenv/-/dotenv-16.4.5.tgz",
+      "integrity": "sha512-ZmdL2rui+eB2YwhsWzjInR8LldtZHGDoQ1ugH85ppHKwpUHL7j7rN0Ti9NCnGiQbhaZ11FpR+7ao1dNsmduNUg==",
       "engines": {
         "node": ">=12"
+      },
+      "funding": {
+        "url": "https://dotenvx.com"
       }
     },
     "node_modules/dotenv-expand": {
@@ -41617,7 +41620,7 @@
     },
     "packages/sdc-populate": {
       "name": "@aehrc/sdc-populate",
-      "version": "2.2.3",
+      "version": "2.2.4",
       "license": "Apache-2.0",
       "dependencies": {
         "dayjs": "^1.11.10",
@@ -41665,10 +41668,10 @@
     },
     "packages/smart-forms-renderer": {
       "name": "@aehrc/smart-forms-renderer",
-      "version": "0.35.8",
+      "version": "0.35.9",
       "license": "Apache-2.0",
       "dependencies": {
-        "@aehrc/sdc-populate": "^2.2.3",
+        "@aehrc/sdc-populate": "^2.2.4",
         "@iconify/react": "^4.1.1",
         "dayjs": "^1.11.10",
         "deep-diff": "^1.0.2",
@@ -42629,6 +42632,7 @@
       "license": "ISC",
       "dependencies": {
         "cors": "^2.8.5",
+        "dotenv": "^16.4.5",
         "express": "^4.19.2"
       },
       "devDependencies": {
diff --git a/services/extract-express/package.json b/services/extract-express/package.json
index 0bebadb2..876d16fd 100644
--- a/services/extract-express/package.json
+++ b/services/extract-express/package.json
@@ -13,7 +13,8 @@
   "license": "ISC",
   "dependencies": {
     "express": "^4.19.2",
-    "cors": "^2.8.5"
+    "cors": "^2.8.5",
+    "dotenv": "^16.4.5"
   },
   "devDependencies": {
     "@types/express": "^4.17.21",