diff --git a/Dockerfile b/Dockerfile
index 7d90219e2..733fb5e37 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -44,7 +44,7 @@ COPY version/ version/
 
 RUN CGO_ENABLED=0 GOOS=linux GOARCH=$TARGETARCH GO111MODULE=on go build -a -o livekit-server ./cmd/server
 
-FROM alpine:3.24.2@sha256:294b683cb724975bec92580e1e685676bd4b50bda910ddb8c51d4cabeaec77e6
+FROM alpine:3.24.3@sha256:c6b073f8e9e58d881f6ffba6ebf3b9ebd60b9e7d6e8337018c0e68bb5c356873
 
 # Pull the latest security patches for base packages within the pinned Alpine
 # release. The digest above is only refreshed by a Renovate PR, so without this
diff --git a/cmd/test-server/Dockerfile b/cmd/test-server/Dockerfile
index a77142b5c..17ab6cd39 100644
--- a/cmd/test-server/Dockerfile
+++ b/cmd/test-server/Dockerfile
@@ -37,7 +37,7 @@ COPY version/ version/
 
 RUN CGO_ENABLED=0 GOOS=linux GOARCH=$TARGETARCH GO111MODULE=on go build -a -o livekit-test-server ./cmd/test-server
 
-FROM alpine:3.24.2@sha256:294b683cb724975bec92580e1e685676bd4b50bda910ddb8c51d4cabeaec77e6
+FROM alpine:3.24.3@sha256:c6b073f8e9e58d881f6ffba6ebf3b9ebd60b9e7d6e8337018c0e68bb5c356873
 
 # Pull the latest security patches for base packages within the pinned Alpine
 # release; the digest above is only refreshed by a Renovate PR. See the note in