diff --git a/.pnp.cjs b/.pnp.cjs
old mode 100755
new mode 100644
index 1b19346..bc8aa32
--- a/.pnp.cjs
+++ b/.pnp.cjs
@@ -53,7 +53,7 @@ const RAW_RUNTIME_STATE =
           ["@types/node", "npm:24.0.10"],\
           ["bcrypt", "npm:6.0.0"],\
           ["chalk", "npm:4.1.2"],\
-          ["dotenv", "npm:17.0.1"],\
+          ["dotenv", "npm:17.2.1"],\
           ["knip", "virtual:896f9be96c54671e2a764d12dd66a3c4ecec90363a4b99a53cdfb2433e3475682e845d14c63ddcdbf06d1acefddd1660a84614f14966ab898a8eeadc4720efae#npm:5.61.3"],\
           ["oxlint", "npm:1.5.0"],\
           ["phantom-api-client", "workspace:phantom-api"],\
@@ -4620,10 +4620,10 @@ const RAW_RUNTIME_STATE =
       }]\
     ]],\
     ["dotenv", [\
-      ["npm:17.0.1", {\
-        "packageLocation": "./.yarn/cache/dotenv-npm-17.0.1-1b898b78c6-79d3381832.zip/node_modules/dotenv/",\
+      ["npm:17.2.1", {\
+        "packageLocation": "./.yarn/cache/dotenv-npm-17.2.1-33fbb0afbc-918dd2f9d8.zip/node_modules/dotenv/",\
         "packageDependencies": [\
-          ["dotenv", "npm:17.0.1"]\
+          ["dotenv", "npm:17.2.1"]\
         ],\
         "linkType": "HARD"\
       }]\
@@ -7416,7 +7416,7 @@ const RAW_RUNTIME_STATE =
           ["cookie-parser", "npm:1.4.7"],\
           ["cors", "npm:2.8.5"],\
           ["csurf", "npm:1.11.0"],\
-          ["dotenv", "npm:17.0.1"],\
+          ["dotenv", "npm:17.2.1"],\
           ["esbuild", "npm:0.25.5"],\
           ["express", "npm:4.21.2"],\
           ["express-rate-limit", "virtual:09e1a04afd45af093cd8c29b97ddf4d19df61499634c38d0af82bb90c3d7132ade4b7fe95e3fb270962602a48f0e33defa03b58e28d078240eaec795cfcd7520#npm:7.5.1"],\
@@ -7468,7 +7468,7 @@ const RAW_RUNTIME_STATE =
           ["@types/node", "npm:24.0.10"],\
           ["bcrypt", "npm:6.0.0"],\
           ["chalk", "npm:4.1.2"],\
-          ["dotenv", "npm:17.0.1"],\
+          ["dotenv", "npm:17.2.1"],\
           ["knip", "virtual:896f9be96c54671e2a764d12dd66a3c4ecec90363a4b99a53cdfb2433e3475682e845d14c63ddcdbf06d1acefddd1660a84614f14966ab898a8eeadc4720efae#npm:5.61.3"],\
           ["oxlint", "npm:1.5.0"],\
           ["phantom-api-client", "workspace:phantom-api"],\
diff --git a/package.json b/package.json
index 1143ce2..4ee26f0 100644
--- a/package.json
+++ b/package.json
@@ -6,7 +6,7 @@
     "@types/node": "^24.0.9",
     "bcrypt": "^6.0.0",
     "chalk": "^4.1.2",
-    "dotenv": "^17.0.1",
+    "dotenv": "^17.2.1",
     "knip": "^5.61.3",
     "oxlint": "^1.0.0",
     "phantom-api-client": "workspace:*",
diff --git a/phantom-api-backend/package.json b/phantom-api-backend/package.json
index 94a6442..e968128 100644
--- a/phantom-api-backend/package.json
+++ b/phantom-api-backend/package.json
@@ -36,7 +36,7 @@
     "@types/redis": "^4.0.11",
     "@types/supertest": "^6.0.0",
     "@vitest/coverage-v8": "^3.2.4",
-    "dotenv": "^17.0.1",
+    "dotenv": "^17.2.1",
     "esbuild": "^0.25.5",
     "oxlint": "^1.0.0",
     "supertest": "^7.1.1",
diff --git a/yarn.lock b/yarn.lock
index d6d5672..a6a67a3 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -3538,10 +3538,10 @@ __metadata:
   languageName: node
   linkType: hard
 
-"dotenv@npm:^17.0.1":
-  version: 17.0.1
-  resolution: "dotenv@npm:17.0.1"
-  checksum: 10c0/79d3381832ffc6ada0cab8158120c6190e8f8680c1ff985e9d4d1345229219923b23b800969ff47412a71f965da582c7a86a5ea0d257f9106f8f3522ceb5befa
+"dotenv@npm:^17.2.1":
+  version: 17.2.1
+  resolution: "dotenv@npm:17.2.1"
+  checksum: 10c0/918dd2f9d8b8f86b0afabad9534793d51de3718c437f9e7b6525628cf68c1d4ae768cc37a5afff38c066f58a8ecf549f4ac6cd5617485bd328e826112cc2650a
   languageName: node
   linkType: hard
 
@@ -6018,7 +6018,7 @@ __metadata:
     cookie-parser: "npm:^1.4.6"
     cors: "npm:^2.8.5"
     csurf: "npm:^1.11.0"
-    dotenv: "npm:^17.0.1"
+    dotenv: "npm:^17.2.1"
     esbuild: "npm:^0.25.5"
     express: "npm:^4.18.2"
     express-rate-limit: "npm:^7.5.1"
@@ -6069,7 +6069,7 @@ __metadata:
     "@types/node": "npm:^24.0.9"
     bcrypt: "npm:^6.0.0"
     chalk: "npm:^4.1.2"
-    dotenv: "npm:^17.0.1"
+    dotenv: "npm:^17.2.1"
     knip: "npm:^5.61.3"
     oxlint: "npm:^1.0.0"
     phantom-api-client: "workspace:*"