diff --git a/package.json b/package.json
index e7265c2..56e997e 100644
--- a/package.json
+++ b/package.json
@@ -27,7 +27,7 @@
   "homepage": "https://github.com/valora-inc/secrets-loader#readme",
   "dependencies": {
     "@google-cloud/secret-manager": "^5.1.0",
-    "dotenv": "^10.0.0"
+    "dotenv": "^16.4.5"
   },
   "devDependencies": {
     "@types/jest": "^29.0.0",
diff --git a/yarn.lock b/yarn.lock
index 5ecbba1..9085c92 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -1804,10 +1804,10 @@ dot-prop@^5.1.0:
   dependencies:
     is-obj "^2.0.0"
 
-dotenv@^10.0.0:
-  version "10.0.0"
-  resolved "https://registry.npmjs.org/dotenv/-/dotenv-10.0.0.tgz"
-  integrity sha512-rlBi9d8jpv9Sf1klPjNfFAuWDjKLwTIJJ/VxtoTwIR6hnZxcEOQCZg2oIL3MWBYw5GpUDKOEnND7LXTbIpQ03Q==
+dotenv@^16.4.5:
+  version "16.4.5"
+  resolved "https://registry.yarnpkg.com/dotenv/-/dotenv-16.4.5.tgz#cdd3b3b604cb327e286b4762e13502f717cb099f"
+  integrity sha512-ZmdL2rui+eB2YwhsWzjInR8LldtZHGDoQ1ugH85ppHKwpUHL7j7rN0Ti9NCnGiQbhaZ11FpR+7ao1dNsmduNUg==
 
 dotgitignore@^2.1.0:
   version "2.1.0"