diff --git a/apps/combiner/package.json b/apps/combiner/package.json
index ba4387910..eb3b57922 100644
--- a/apps/combiner/package.json
+++ b/apps/combiner/package.json
@@ -49,7 +49,7 @@
     "@types/uuid": "^7.0.3",
     "blind-threshold-bls": "npm:@celo/blind-threshold-bls@1.0.0-beta",
     "bunyan": "1.8.15",
-    "dotenv": "^8.2.0",
+    "dotenv": "^16.3.1",
     "express": "^4.17.1",
     "lru-cache": "^10.0.1",
     "node-fetch": "^2.6.9",
diff --git a/apps/signer/package.json b/apps/signer/package.json
index 4d14ecc08..34b3f863b 100644
--- a/apps/signer/package.json
+++ b/apps/signer/package.json
@@ -63,7 +63,7 @@
     "blind-threshold-bls": "npm:@celo/blind-threshold-bls@1.0.0-beta",
     "bunyan": "1.8.15",
     "cron": "^2.4.1",
-    "dotenv": "^8.2.0",
+    "dotenv": "^16.3.1",
     "express": "^4.17.1",
     "knex": "^2.1.0",
     "lru-cache": "^10.0.1",
diff --git a/packages/common/package.json b/packages/common/package.json
index f6a2d62fd..f3ec6fdf4 100644
--- a/packages/common/package.json
+++ b/packages/common/package.json
@@ -33,7 +33,7 @@
     "bunyan": "1.8.15",
     "bunyan-debug-stream": "2.0.0",
     "bunyan-gke-stackdriver": "0.1.2",
-    "dotenv": "^8.2.0",
+    "dotenv": "^16.3.1",
     "elliptic": "^6.5.4",
     "express": "^4.17.6",
     "fp-ts": "2.1.1",
diff --git a/yarn.lock b/yarn.lock
index d2a2b689d..3203cb2f4 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -1912,7 +1912,7 @@ __metadata:
     "@types/uuid": "npm:^7.0.3"
     blind-threshold-bls: "npm:@celo/blind-threshold-bls@1.0.0-beta"
     bunyan: "npm:1.8.15"
-    dotenv: "npm:^8.2.0"
+    dotenv: "npm:^16.3.1"
     express: "npm:^4.17.1"
     jest: "npm:^29.7.0"
     knex: "npm:^2.1.0"
@@ -1970,7 +1970,7 @@ __metadata:
     bunyan: "npm:1.8.15"
     bunyan-debug-stream: "npm:2.0.0"
     bunyan-gke-stackdriver: "npm:0.1.2"
-    dotenv: "npm:^8.2.0"
+    dotenv: "npm:^16.3.1"
     elliptic: "npm:^6.5.4"
     express: "npm:^4.17.6"
     fp-ts: "npm:2.1.1"
@@ -2035,7 +2035,7 @@ __metadata:
     blind-threshold-bls: "npm:@celo/blind-threshold-bls@1.0.0-beta"
     bunyan: "npm:1.8.15"
     cron: "npm:^2.4.1"
-    dotenv: "npm:^8.2.0"
+    dotenv: "npm:^16.3.1"
     express: "npm:^4.17.1"
     jest: "npm:^29.7.0"
     knex: "npm:^2.1.0"
@@ -10174,6 +10174,13 @@ __metadata:
   languageName: node
   linkType: hard
 
+"dotenv@npm:^16.3.1":
+  version: 16.3.1
+  resolution: "dotenv@npm:16.3.1"
+  checksum: dbb778237ef8750e9e3cd1473d3c8eaa9cc3600e33a75c0e36415d0fa0848197f56c3800f77924c70e7828f0b03896818cd52f785b07b9ad4d88dba73fbba83f
+  languageName: node
+  linkType: hard
+
 "dotenv@npm:^8.2.0":
   version: 8.6.0
   resolution: "dotenv@npm:8.6.0"