diff --git a/packages/start/package.json b/packages/start/package.json
index c79b1dd0..ffc6c5bf 100644
--- a/packages/start/package.json
+++ b/packages/start/package.json
@@ -28,7 +28,7 @@
   "dependencies": {
     "@4c/cli-core": "^4.0.0",
     "@babel/code-frame": "^7.16.0",
-    "dotenv": "^10.0.0",
+    "dotenv": "^16.1.3",
     "exists-case": "^0.1.0",
     "fork-ts-checker-webpack-plugin": "^6.5.0",
     "lodash": "^4.17.21",
diff --git a/yarn.lock b/yarn.lock
index 4f0ea3ad..e24f3046 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -4440,10 +4440,10 @@ dot-prop@^6.0.1:
   dependencies:
     is-obj "^2.0.0"
 
-dotenv@^10.0.0:
-  version "10.0.0"
-  resolved "https://registry.yarnpkg.com/dotenv/-/dotenv-10.0.0.tgz#3d4227b8fb95f81096cdd2b66653fb2c7085ba81"
-  integrity sha512-rlBi9d8jpv9Sf1klPjNfFAuWDjKLwTIJJ/VxtoTwIR6hnZxcEOQCZg2oIL3MWBYw5GpUDKOEnND7LXTbIpQ03Q==
+dotenv@^16.1.3:
+  version "16.1.3"
+  resolved "https://registry.yarnpkg.com/dotenv/-/dotenv-16.1.3.tgz#0c67e90d0ddb48d08c570888f709b41844928210"
+  integrity sha512-FYssxsmCTtKL72fGBSvb1K9dRz0/VZeWqFme/vSb7r7323x4CRaHu4LvQ5JG3+s6yt2YPbBrkpiEODktfyjI9A==
 
 duplexer@^0.1.1, duplexer@^0.1.2:
   version "0.1.2"