diff --git a/Dockerfile b/Dockerfile
index 02b64dce7..9d003478e 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -61,7 +61,7 @@ RUN echo "Building Synkronus with version: ${SYNKRONUS_VERSION}" && \
     go build -a -ldflags="-w -s -X github.com/opendataensemble/synkronus/pkg/version.version=${SYNKRONUS_VERSION}" -o synkronus ./cmd/synkronus
 
 # Stage 3: Minimal runtime image — single Go server (API + portal)
-FROM alpine:3.23
+FROM alpine:3.24
 
 RUN apk --no-cache add ca-certificates tzdata wget
 
diff --git a/Dockerfile.cli.slim b/Dockerfile.cli.slim
index 48a1c0fa1..93bfd28dc 100644
--- a/Dockerfile.cli.slim
+++ b/Dockerfile.cli.slim
@@ -1,7 +1,7 @@
 # CI/runtime-only image: expects a pre-built synk binary in the build context.
 # Build context layout: ./synk (static binary)
 
-FROM alpine:3.23
+FROM alpine:3.24
 
 RUN apk --no-cache add ca-certificates
 
diff --git a/Dockerfile.slim b/Dockerfile.slim
index 781427a45..ee6d18490 100644
--- a/Dockerfile.slim
+++ b/Dockerfile.slim
@@ -2,7 +2,7 @@
 # Build context layout: ./synkronus (binary), ./openapi/, ./static/
 # Portal assets are embedded in the binary at compile time.
 
-FROM alpine:3.23
+FROM alpine:3.24
 
 RUN apk --no-cache add ca-certificates tzdata wget