diff --git a/cli/package.json b/cli/package.json
index 20ca9c428..5a9a6583a 100644
--- a/cli/package.json
+++ b/cli/package.json
@@ -38,7 +38,7 @@
         "babel-plugin-react-require": "^3.1.3",
         "chokidar": "^3.3.0",
         "detect-port": "^1.3.0",
-        "dotenv": "^8.1.0",
+        "dotenv": "^16.0.3",
         "dotenv-expand": "^5.1.0",
         "form-data": "^3.0.0",
         "fs-extra": "^8.1.0",
diff --git a/yarn.lock b/yarn.lock
index 985abcf19..31b644fbb 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -5846,10 +5846,10 @@ dotenv@^10.0.0:
   resolved "https://registry.yarnpkg.com/dotenv/-/dotenv-10.0.0.tgz#3d4227b8fb95f81096cdd2b66653fb2c7085ba81"
   integrity sha512-rlBi9d8jpv9Sf1klPjNfFAuWDjKLwTIJJ/VxtoTwIR6hnZxcEOQCZg2oIL3MWBYw5GpUDKOEnND7LXTbIpQ03Q==
 
-dotenv@^8.1.0:
-  version "8.6.0"
-  resolved "https://registry.yarnpkg.com/dotenv/-/dotenv-8.6.0.tgz#061af664d19f7f4d8fc6e4ff9b584ce237adcb8b"
-  integrity sha512-IrPdXQsk2BbzvCBGBOTmmSH5SodmqZNt4ERAZDmW4CT+tL8VtvinqywuANaFu4bOMWki16nqf0e4oC0QIaDr/g==
+dotenv@^16.0.3:
+  version "16.0.3"
+  resolved "https://registry.yarnpkg.com/dotenv/-/dotenv-16.0.3.tgz#115aec42bac5053db3c456db30cc243a5a836a07"
+  integrity sha512-7GO6HghkA5fYG9TYnNxi14/7K9f5occMlp3zXAuSxn7CKCxt9xbNWG7yF8hTCSUchlfWSe3uLmlPfigevRItzQ==
 
 duplexer3@^0.1.4:
   version "0.1.4"