diff --git a/containers/apps/nextcloud-imaginary/Dockerfile b/containers/apps/nextcloud-imaginary/Dockerfile
index 241b9655b68..4af7eb9ceac 100644
--- a/containers/apps/nextcloud-imaginary/Dockerfile
+++ b/containers/apps/nextcloud-imaginary/Dockerfile
@@ -11,7 +11,8 @@ RUN set -ex; \
         vips-poppler; \
     go install github.com/h2non/imaginary@b632dae8cc321452c3f85bcae79c580b1ae1ed84
 
-FROM alpine:3.20.3@sha256:1e42bbe2508154c9126d48c2b8a75420c3544343bf86fd041fb7527e017a4b4a
+FROM alpine:3.21.0@sha256:21dc6063fd678b478f57c0e13f47560d0ea4eeba26dfc947b2a4f81f686b9f45
+
 # hadolint ignore=DL3018
 RUN set -ex; \
     apk add --no-cache \
diff --git a/containers/apps/nextcloud-push-notify/Dockerfile b/containers/apps/nextcloud-push-notify/Dockerfile
index a5b30738e73..d31c721708b 100644
--- a/containers/apps/nextcloud-push-notify/Dockerfile
+++ b/containers/apps/nextcloud-push-notify/Dockerfile
@@ -1,4 +1,4 @@
-FROM alpine:3.20.3@sha256:1e42bbe2508154c9126d48c2b8a75420c3544343bf86fd041fb7527e017a4b4a
+FROM alpine:3.21.0@sha256:21dc6063fd678b478f57c0e13f47560d0ea4eeba26dfc947b2a4f81f686b9f45
 
 SHELL ["/bin/ash", "-eo", "pipefail", "-c"]
 # hadolint ignore=DL3018
diff --git a/containers/apps/traefik/Dockerfile b/containers/apps/traefik/Dockerfile
index 068ce5d2055..74ad6b89bd0 100644
--- a/containers/apps/traefik/Dockerfile
+++ b/containers/apps/traefik/Dockerfile
@@ -1,7 +1,7 @@
 FROM traefik:v3.2.3@sha256:efb87236c8c92599bcd3a67a7a8a55e0f255665f4719722bf398935aa9b92270
 # Above line used by CI to find tags etc
 
-FROM alpine:3.20.3@sha256:1e42bbe2508154c9126d48c2b8a75420c3544343bf86fd041fb7527e017a4b4a as plugins
+FROM alpine:3.21.0@sha256:21dc6063fd678b478f57c0e13f47560d0ea4eeba26dfc947b2a4f81f686b9f45 as plugins
 
 # FIXME: Find a way to keep versions up to date
 # -- Use the following prefixes to specify plugins to clone
diff --git a/containers/base/alpine/Dockerfile b/containers/base/alpine/Dockerfile
index 307805ec65b..3bf627a5e70 100644
--- a/containers/base/alpine/Dockerfile
+++ b/containers/base/alpine/Dockerfile
@@ -1,4 +1,4 @@
-FROM alpine:3.20.3@sha256:1e42bbe2508154c9126d48c2b8a75420c3544343bf86fd041fb7527e017a4b4a
+FROM alpine:3.21.0@sha256:21dc6063fd678b478f57c0e13f47560d0ea4eeba26dfc947b2a4f81f686b9f45
 
 ARG CONTAINER_NAME
 ARG CONTAINER_VER