diff --git a/services/backend/package.json b/services/backend/package.json
index 4fce569e..e6fffc04 100644
--- a/services/backend/package.json
+++ b/services/backend/package.json
@@ -23,7 +23,7 @@
     "@discordjs/voice": "^0.19.2",
     "@orpc/server": "1.15.1",
     "axios": "^1.20.0",
-    "dotenv": "^17.4.2",
+    "dotenv": "^18.0.0",
     "drizzle-orm": "^0.45.2",
     "express": "^5.2.1",
     "helmet": "^8.1.0",
diff --git a/services/backend/pnpm-lock.yaml b/services/backend/pnpm-lock.yaml
index c0e359b0..61d6ccbf 100644
--- a/services/backend/pnpm-lock.yaml
+++ b/services/backend/pnpm-lock.yaml
@@ -18,8 +18,8 @@ importers:
         specifier: ^1.20.0
         version: 1.20.0(debug@4.4.3)
       dotenv:
-        specifier: ^17.4.2
-        version: 17.4.2
+        specifier: ^18.0.0
+        version: 18.0.0
       drizzle-orm:
         specifier: ^0.45.2
         version: 0.45.2(@opentelemetry/api@1.9.1)(@types/pg@8.23.1)(pg@8.23.0)
@@ -860,9 +860,10 @@ packages:
   discord-api-types@0.38.52:
     resolution: {integrity: sha512-uwe9EKfbjsmgWc2fdFjvDbj+dQqx3lp7wqDCmIha0jInuU+xeQjkCK9tMMn+p7RXfdVQORCInq4cD3U2ymDmyg==}
 
-  dotenv@17.4.2:
-    resolution: {integrity: sha512-nI4U3TottKAcAD9LLud4Cb7b2QztQMUEfHbvhTH09bqXTxnSie8WnjPALV/WMCrJZ6UV/qHJ6L03OqO3LcdYZw==}
+  dotenv@18.0.0:
+    resolution: {integrity: sha512-16YSUvsKtKbwrTbESvtTSZzzJUug6jdFdqiBFg9Q6Bk1JY9r0hAtrtTiWxdI9YrsgOTmkjZRdgU0n3LnwGpECw==}
     engines: {node: '>=12'}
+    hasBin: true
 
   drizzle-orm@0.45.2:
     resolution: {integrity: sha512-kY0BSaTNYWnoDMVoyY8uxmyHjpJW1geOmBMdSSicKo9CIIWkSxMIj2rkeSR51b8KAPB7m+qysjuHme5nKP+E5Q==}
@@ -2234,7 +2235,7 @@ snapshots:
 
   discord-api-types@0.38.52: {}
 
-  dotenv@17.4.2: {}
+  dotenv@18.0.0: {}
 
   drizzle-orm@0.45.2(@opentelemetry/api@1.9.1)(@types/pg@8.23.1)(pg@8.23.0):
     optionalDependencies: