diff --git a/backend/docker/Dockerfile b/backend/docker/Dockerfile
index c1fff55af..a8cedc803 100644
--- a/backend/docker/Dockerfile
+++ b/backend/docker/Dockerfile
@@ -10,7 +10,7 @@
 #    DOCKER_BUILDKIT=1 docker build -f docker/Dockerfile .
 
 ## Stage 0: Base image with only yarn and package.json
-FROM docker.io/node:20-alpine@sha256:3239a42059a6a074302efdf67dde3e8a73f78602ee039d197f00ad97fba3e21a as base
+FROM docker.io/node:20-alpine@sha256:d9d53500783a153234cc47d89a2f9117d1ed4eadf29cbeb46c377d172348aa73 as base
 # Add tini to handle signals
 # https://github.com/nodejs/docker-node/blob/main/docs/BestPractices.md#handling-kernel-signals
 RUN apk add --no-cache tini
diff --git a/frontend/docker/Dockerfile b/frontend/docker/Dockerfile
index da19c4b5c..a8e33e14c 100644
--- a/frontend/docker/Dockerfile
+++ b/frontend/docker/Dockerfile
@@ -3,7 +3,7 @@
 # SPDX-License-Identifier: CC-BY-SA-4.0
 
 # BASE
-FROM docker.io/node:20-alpine@sha256:3239a42059a6a074302efdf67dde3e8a73f78602ee039d197f00ad97fba3e21a AS base
+FROM docker.io/node:20-alpine@sha256:d9d53500783a153234cc47d89a2f9117d1ed4eadf29cbeb46c377d172348aa73 AS base
 RUN apk add --no-cache tini
 ENTRYPOINT ["tini", "--"]