diff --git a/streaming/package.json b/streaming/package.json
index a820eeb867..ec77cf5e02 100644
--- a/streaming/package.json
+++ b/streaming/package.json
@@ -18,7 +18,7 @@
   },
   "dependencies": {
     "cors": "^2.8.5",
-    "dotenv": "^16.0.3",
+    "dotenv": "^17.0.0",
     "express": "^4.18.2",
     "ioredis": "^5.3.2",
     "jsdom": "^26.0.0",
diff --git a/yarn.lock b/yarn.lock
index 1645da1f81..072e889537 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -2776,7 +2776,7 @@ __metadata:
     "@types/ws": "npm:^8.5.9"
     bufferutil: "npm:^4.0.7"
     cors: "npm:^2.8.5"
-    dotenv: "npm:^16.0.3"
+    dotenv: "npm:^17.0.0"
     express: "npm:^4.18.2"
     globals: "npm:^16.0.0"
     ioredis: "npm:^5.3.2"
@@ -6403,10 +6403,10 @@ __metadata:
   languageName: node
   linkType: hard
 
-"dotenv@npm:^16.0.3":
-  version: 16.5.0
-  resolution: "dotenv@npm:16.5.0"
-  checksum: 10c0/5bc94c919fbd955bf0ba44d33922a1e93d1078e64a1db5c30faeded1d996e7a83c55332cb8ea4fae5a9ca4d0be44cbceb95c5811e70f9f095298df09d1997dd9
+"dotenv@npm:^17.0.0":
+  version: 17.2.1
+  resolution: "dotenv@npm:17.2.1"
+  checksum: 10c0/918dd2f9d8b8f86b0afabad9534793d51de3718c437f9e7b6525628cf68c1d4ae768cc37a5afff38c066f58a8ecf549f4ac6cd5617485bd328e826112cc2650a
   languageName: node
   linkType: hard