diff --git a/docker-compose.yml b/docker-compose.yml
index 112762da..b86cdf22 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -2,7 +2,7 @@
 
 services:
   db:
-    image: postgres:12-alpine
+    image: postgres:15-alpine
     restart: always
     environment:
       - POSTGRES_PASSWORD
diff --git a/docker/Dockerfile-autoheal b/docker/Dockerfile-autoheal
index 3ef47bda..54a00433 100644
--- a/docker/Dockerfile-autoheal
+++ b/docker/Dockerfile-autoheal
@@ -1,3 +1,3 @@
-FROM alpine:3.9
+FROM alpine:3.18
 
 RUN apk add --no-cache jq curl
diff --git a/docker/Dockerfile-nginx b/docker/Dockerfile-nginx
index d287f430..6b7910d9 100644
--- a/docker/Dockerfile-nginx
+++ b/docker/Dockerfile-nginx
@@ -1,4 +1,4 @@
-FROM nginx:1.17-alpine
+FROM nginx:1.24-alpine
 
 RUN mkdir -p /var/www/scos-sensor/static
 COPY --chown=nginx:nginx ./src/static/ /var/www/scos-sensor/static/
diff --git a/env.template b/env.template
index ea47fc9c..512347c9 100644
--- a/env.template
+++ b/env.template
@@ -60,7 +60,7 @@ CALLBACK_SSL_VERIFICATION=true
 MANAGER_FQDN="$(hostname -f)"
 MANAGER_IP="$(hostname -I | cut -d' ' -f1)"
 
-BASE_IMAGE=ghcr.io/ntia/scos-tekrsa/tekrsa_usb:0.2.1
+BASE_IMAGE=ghcr.io/ntia/scos-tekrsa/tekrsa_usb:0.2.3
 # Default callback api/results
 # Set to OAUTH if using OAuth Password Flow Authentication, callback url needs to be api/v2/results
 CALLBACK_AUTHENTICATION=TOKEN