diff --git a/backend/docker/Dockerfile b/backend/docker/Dockerfile
index c5e4eea00..4c13da6ed 100644
--- a/backend/docker/Dockerfile
+++ b/backend/docker/Dockerfile
@@ -10,7 +10,7 @@
 #    DOCKER_BUILDKIT=1 docker build -f docker/Dockerfile .
 
 ## Stage 0: Base image with only yarn and package.json
-FROM docker.io/node:20-alpine@sha256:0a8a2a280f1220df46e66abbf4352e4bb0a474a40c3d29f3e99775d13f6ea1ee as base
+FROM docker.io/node:20-alpine@sha256:2bc2b337c1c6c08ec9e555c595f034c068d49700b1f846c2f6d322be3ab71787 as base
 # Add tini to handle signals
 # https://github.com/nodejs/docker-node/blob/main/docs/BestPractices.md#handling-kernel-signals
 RUN apk add --no-cache tini
diff --git a/frontend/docker/Dockerfile b/frontend/docker/Dockerfile
index 32dd258c3..88adaf7fb 100644
--- a/frontend/docker/Dockerfile
+++ b/frontend/docker/Dockerfile
@@ -3,7 +3,7 @@
 # SPDX-License-Identifier: CC-BY-SA-4.0
 
 # BASE
-FROM docker.io/node:20-alpine@sha256:0a8a2a280f1220df46e66abbf4352e4bb0a474a40c3d29f3e99775d13f6ea1ee AS base
+FROM docker.io/node:20-alpine@sha256:2bc2b337c1c6c08ec9e555c595f034c068d49700b1f846c2f6d322be3ab71787 AS base
 RUN apk add --no-cache tini
 ENTRYPOINT ["tini", "--"]