diff --git a/containers/apps/nextcloud-imaginary/Dockerfile b/containers/apps/nextcloud-imaginary/Dockerfile
index 4af7eb9ceac..f66db944ab8 100644
--- a/containers/apps/nextcloud-imaginary/Dockerfile
+++ b/containers/apps/nextcloud-imaginary/Dockerfile
@@ -11,7 +11,7 @@ RUN set -ex; \
         vips-poppler; \
     go install github.com/h2non/imaginary@b632dae8cc321452c3f85bcae79c580b1ae1ed84
 
-FROM alpine:3.21.0@sha256:21dc6063fd678b478f57c0e13f47560d0ea4eeba26dfc947b2a4f81f686b9f45
+FROM alpine:3.21.2@sha256:56fa17d2a7e7f168a043a2712e63aed1f8543aeafdcee47c58dcffe38ed51099
 
 # hadolint ignore=DL3018
 RUN set -ex; \
diff --git a/containers/apps/nextcloud-push-notify/Dockerfile b/containers/apps/nextcloud-push-notify/Dockerfile
index 6a7eeb0aa2a..993cef959b1 100644
--- a/containers/apps/nextcloud-push-notify/Dockerfile
+++ b/containers/apps/nextcloud-push-notify/Dockerfile
@@ -1,4 +1,4 @@
-FROM alpine:3.21.0@sha256:21dc6063fd678b478f57c0e13f47560d0ea4eeba26dfc947b2a4f81f686b9f45
+FROM alpine:3.21.2@sha256:56fa17d2a7e7f168a043a2712e63aed1f8543aeafdcee47c58dcffe38ed51099
 
 SHELL ["/bin/ash", "-eo", "pipefail", "-c"]
 # hadolint ignore=DL3018
diff --git a/containers/apps/traefik/Dockerfile b/containers/apps/traefik/Dockerfile
index c51845dba41..b1d4c28366b 100644
--- a/containers/apps/traefik/Dockerfile
+++ b/containers/apps/traefik/Dockerfile
@@ -1,7 +1,7 @@
 FROM traefik:v3.3.2@sha256:e8b170343bb1ab703a956049291ef0d951867bef39839c9b0d70eebda6b2ed29
 # Above line used by CI to find tags etc
 
-FROM alpine:3.21.0@sha256:21dc6063fd678b478f57c0e13f47560d0ea4eeba26dfc947b2a4f81f686b9f45 as plugins
+FROM alpine:3.21.2@sha256:56fa17d2a7e7f168a043a2712e63aed1f8543aeafdcee47c58dcffe38ed51099 as plugins
 
 # FIXME: Find a way to keep versions up to date
 # -- Use the following prefixes to specify plugins to clone
diff --git a/containers/base/alpine/Dockerfile b/containers/base/alpine/Dockerfile
index 3bf627a5e70..8ccdd08e005 100644
--- a/containers/base/alpine/Dockerfile
+++ b/containers/base/alpine/Dockerfile
@@ -1,4 +1,4 @@
-FROM alpine:3.21.0@sha256:21dc6063fd678b478f57c0e13f47560d0ea4eeba26dfc947b2a4f81f686b9f45
+FROM alpine:3.21.2@sha256:56fa17d2a7e7f168a043a2712e63aed1f8543aeafdcee47c58dcffe38ed51099
 
 ARG CONTAINER_NAME
 ARG CONTAINER_VER