diff --git a/package-lock.json b/package-lock.json
index 77c4f5242..a37d0a35f 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -6568,9 +6568,9 @@
       "dev": true
     },
     "dotenv-expand": {
-      "version": "5.1.0",
-      "resolved": "https://registry.npmjs.org/dotenv-expand/-/dotenv-expand-5.1.0.tgz",
-      "integrity": "sha512-YXQl1DSa4/PQyRfgrv6aoNjhasp/p4qs9FjJ4q4cQk+8m4r6k4ZSiEyytKG8f8W9gi8WsQtIObNmKd+tMzNTmA==",
+      "version": "6.0.1",
+      "resolved": "https://registry.npmjs.org/dotenv-expand/-/dotenv-expand-6.0.1.tgz",
+      "integrity": "sha512-GNHcCOyRKLCXWnH3L/+sJ04PQxxgTOZDCPuQQnqkqPMGIilyoxHZ2JUNmh2VWKCfzVKH/AZsqcbuSYlDDVb/xw==",
       "dev": true
     },
     "duplexify": {
diff --git a/package.json b/package.json
index 89ecffa1b..c2203b646 100644
--- a/package.json
+++ b/package.json
@@ -80,7 +80,7 @@
     "connect-history-api-fallback": "^1.6.0",
     "cspell": "^5.15.1",
     "dotenv": "^8.2.0",
-    "dotenv-expand": "^5.1.0",
+    "dotenv-expand": "^6.0.1",
     "envsub": "^4.0.7",
     "http-server": "^14.1.0",
     "husky": "^7.0.2",