diff --git a/backend/Dockerfile b/backend/Dockerfile
index cd354085d74..b85a5ec8d1a 100644
--- a/backend/Dockerfile
+++ b/backend/Dockerfile
@@ -118,7 +118,9 @@ RUN cd /usr/local/deps/target/lib && \
 
 FROM python:3.11-slim-bookworm as base
 
+# apt-get upgrade picks up Debian security fixes that the base tag does not contain yet
 RUN apt-get update && \
+    apt-get upgrade -y && \
     apt-get install -y python3-dev python3-pip tar pkg-config curl libssh2-1 zlib1g libffi-dev default-libmysqlclient-dev libpq-dev tini git openssh-client corkscrew && \
     apt-get clean && \
     rm -fr /usr/share/doc/* \
diff --git a/config-ui/Dockerfile b/config-ui/Dockerfile
index 5a017cc63f9..f5f6925297c 100644
--- a/config-ui/Dockerfile
+++ b/config-ui/Dockerfile
@@ -41,7 +41,12 @@ WORKDIR /usr/share/nginx/html
 RUN rm -rf ./*
 COPY --from=builder /home/node/code/dist/. ./
 EXPOSE 4000 4443
-RUN apt update && apt install -y apache2-utils iproute2
+# apt-get upgrade picks up Debian security fixes that the base tag does not contain yet
+RUN apt-get update && \
+    apt-get upgrade -y && \
+    apt-get install -y apache2-utils iproute2 && \
+    apt-get clean && \
+    rm -rf /var/lib/apt/lists/*
 COPY --from=builder /home/node/code/nginx.sh /usr/bin/nginx.sh
 RUN chmod +x /usr/bin/nginx.sh
 RUN chgrp -R 0 /etc/nginx /var/log/nginx /usr/share/nginx /run && \
diff --git a/grafana/Dockerfile b/grafana/Dockerfile
index 1539b5b7ad4..913b3e766dd 100644
--- a/grafana/Dockerfile
+++ b/grafana/Dockerfile
@@ -37,8 +37,10 @@ ENV GF_SERVER_PROTOCOL=http
 ENV GF_SERVER_DOMAIN=localhost:3000
 ENV GF_SERVER_ROOT_URL=http://localhost:3000/grafana
 USER root
+# apk upgrade picks up Alpine security fixes that the base tag does not contain yet
 # grafana-piechart-panel removed: dashboards use the core "piechart" panel type
-RUN chmod +x /entrypoint.sh && \
+RUN apk upgrade --no-cache && \
+    chmod +x /entrypoint.sh && \
     chgrp -R 0 /etc/grafana /usr/share/grafana /var/lib/grafana && \
     chmod -R g=u /etc/grafana /usr/share/grafana /var/lib/grafana
 USER 101