diff --git a/containers/apps/nextcloud-imaginary/Dockerfile b/containers/apps/nextcloud-imaginary/Dockerfile
index 1a8d775fa62..c751087d9c6 100644
--- a/containers/apps/nextcloud-imaginary/Dockerfile
+++ b/containers/apps/nextcloud-imaginary/Dockerfile
@@ -11,7 +11,7 @@ RUN set -ex; \
         vips-poppler; \
     go install github.com/h2non/imaginary@b632dae8cc321452c3f85bcae79c580b1ae1ed84
 
-FROM public.ecr.aws/docker/library/alpine:3.21.3@sha256:a8560b36e8b8210634f77d9f7f9efd7ffa463e380b75e2e74aff4511df3ef88c
+FROM public.ecr.aws/docker/library/alpine:3.22.0@sha256:8a1f59ffb675680d47db6337b49d22281a139e9d709335b492be023728e11715
 
 # hadolint ignore=DL3018
 RUN set -ex; \
diff --git a/containers/apps/nextcloud-push-notify/Dockerfile b/containers/apps/nextcloud-push-notify/Dockerfile
index 8cce6115847..d93d5059c8a 100644
--- a/containers/apps/nextcloud-push-notify/Dockerfile
+++ b/containers/apps/nextcloud-push-notify/Dockerfile
@@ -1,4 +1,4 @@
-FROM public.ecr.aws/docker/library/alpine:3.21.3@sha256:a8560b36e8b8210634f77d9f7f9efd7ffa463e380b75e2e74aff4511df3ef88c
+FROM public.ecr.aws/docker/library/alpine:3.22.0@sha256:8a1f59ffb675680d47db6337b49d22281a139e9d709335b492be023728e11715
 
 SHELL ["/bin/ash", "-eo", "pipefail", "-c"]
 # hadolint ignore=DL3018
diff --git a/containers/apps/traefik/Dockerfile b/containers/apps/traefik/Dockerfile
index 893c58c3ca0..0c8d5259164 100644
--- a/containers/apps/traefik/Dockerfile
+++ b/containers/apps/traefik/Dockerfile
@@ -1,7 +1,7 @@
 FROM public.ecr.aws/docker/library/traefik:3.4.1@sha256:cd40ab7bc1f047731d5b22595203812343efcb6538014c4e93221cfc3a77217a
 # Above line used by CI to find tags etc
 
-FROM public.ecr.aws/docker/library/alpine:3.21.3@sha256:a8560b36e8b8210634f77d9f7f9efd7ffa463e380b75e2e74aff4511df3ef88c as plugins
+FROM public.ecr.aws/docker/library/alpine:3.22.0@sha256:8a1f59ffb675680d47db6337b49d22281a139e9d709335b492be023728e11715 as plugins
 
 # FIXME: Find a way to keep versions up to date
 # -- Use the following prefixes to specify plugins to clone