diff --git a/packages/core/package.json b/packages/core/package.json
index a0111edf00..407f29eb3b 100644
--- a/packages/core/package.json
+++ b/packages/core/package.json
@@ -72,7 +72,7 @@
     "css-loader": "7.1.2",
     "deepmerge": "^4.3.1",
     "dotenv": "16.4.5",
-    "dotenv-expand": "11.0.7",
+    "dotenv-expand": "12.0.0",
     "fs-extra": "^11.2.0",
     "html-rspack-plugin": "6.0.2",
     "http-proxy-middleware": "^2.0.6",
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 9a73225d85..59f0747568 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -626,8 +626,8 @@ importers:
         specifier: 16.4.5
         version: 16.4.5
       dotenv-expand:
-        specifier: 11.0.7
-        version: 11.0.7
+        specifier: 12.0.0
+        version: 12.0.0
       fs-extra:
         specifier: ^11.2.0
         version: 11.2.0
@@ -3799,6 +3799,10 @@ packages:
     resolution: {integrity: sha512-zIHwmZPRshsCdpMDyVsqGmgyP0yT8GAgXUnkdAoJisxvf33k7yO6OuoKmcTGuXPWSsm8Oh88nZicRLA9Y0rUeA==}
     engines: {node: '>=12'}
 
+  dotenv-expand@12.0.0:
+    resolution: {integrity: sha512-4dtjvwQLxAzb8omUPEsHGmcxtpXKU9yDfXKk3qkEECo1U1Q0/VBwQwIvO+LdYQec3yWjSLwzzgLDImftJg/m2Q==}
+    engines: {node: '>=12'}
+
   dotenv@16.4.5:
     resolution: {integrity: sha512-ZmdL2rui+eB2YwhsWzjInR8LldtZHGDoQ1ugH85ppHKwpUHL7j7rN0Ti9NCnGiQbhaZ11FpR+7ao1dNsmduNUg==}
     engines: {node: '>=12'}
@@ -9655,6 +9659,10 @@ snapshots:
     dependencies:
       dotenv: 16.4.5
 
+  dotenv-expand@12.0.0:
+    dependencies:
+      dotenv: 16.4.5
+
   dotenv@16.4.5: {}
 
   duplexer@0.1.2: {}