diff --git a/token-lending/js/package-lock.json b/token-lending/js/package-lock.json
index e473db3f..f6507ce3 100644
--- a/token-lending/js/package-lock.json
+++ b/token-lending/js/package-lock.json
@@ -237,6 +237,11 @@
             "base64-js": "^1.3.1",
             "ieee754": "^1.2.1"
           }
+        },
+        "dotenv": {
+          "version": "8.2.0",
+          "resolved": "https://registry.npmjs.org/dotenv/-/dotenv-8.2.0.tgz",
+          "integrity": "sha512-8sJ78ElpbDJBHNeBzUbUVLsqKdccaa/BXF1uPTw3GrvQTBgrQrtObr2mUrE38vzYd8cEv+m/JBfDLioYcfXoaw=="
         }
       }
     },
@@ -965,9 +970,10 @@
       }
     },
     "dotenv": {
-      "version": "8.2.0",
-      "resolved": "https://registry.npmjs.org/dotenv/-/dotenv-8.2.0.tgz",
-      "integrity": "sha512-8sJ78ElpbDJBHNeBzUbUVLsqKdccaa/BXF1uPTw3GrvQTBgrQrtObr2mUrE38vzYd8cEv+m/JBfDLioYcfXoaw=="
+      "version": "9.0.0",
+      "resolved": "https://registry.npmjs.org/dotenv/-/dotenv-9.0.0.tgz",
+      "integrity": "sha512-yy3x9XjojW8ROTBePD25AcMoHqGHsvHmtfw8QWlpEXyMMXXPj6brUA464AptUvHuTPRmNz6Sd3ZLNLeJl6dHJA==",
+      "dev": true
     },
     "duplexer": {
       "version": "0.1.2",
diff --git a/token-lending/js/package.json b/token-lending/js/package.json
index 240988cf..b88154bf 100644
--- a/token-lending/js/package.json
+++ b/token-lending/js/package.json
@@ -52,7 +52,7 @@
     "@types/rollup-plugin-json": "^3.0.2",
     "@typescript-eslint/eslint-plugin": "^4.22.1",
     "@typescript-eslint/parser": "^4.22.1",
-    "dotenv": "^8.2.0",
+    "dotenv": "^9.0.0",
     "eslint": "^7.25.0",
     "eslint-config-prettier": "^7.2.0",
     "eslint-plugin-prettier": "^3.4.0",