diff --git a/Dockerfile b/Dockerfile
index 85d63dcc..ed9775cf 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -19,7 +19,7 @@ RUN CGO_ENABLED=0 GOOS=linux GOARCH=$TARGETARCH GO111MODULE=on \
 ## Runtime
 ##
 
-FROM --platform=$TARGETPLATFORM alpine:3.20.0 as runtime
+FROM --platform=$TARGETPLATFORM alpine:3.20.2 as runtime
 RUN apk add iptables-legacy iptables libcap && \
     touch /run/xtables.lock && \
     chmod 0666 /run/xtables.lock
diff --git a/Dockerfile-cni-plugin b/Dockerfile-cni-plugin
index 031a102b..a1088beb 100644
--- a/Dockerfile-cni-plugin
+++ b/Dockerfile-cni-plugin
@@ -34,7 +34,7 @@ RUN --mount=type=cache,target=target \
     just cni-repair-controller arch="$TARGETARCH" profile=release build && \
     mv "target/$target/release/linkerd-cni-repair-controller" .
 
-FROM --platform=$TARGETPLATFORM alpine:3.20.0 as runtime
+FROM --platform=$TARGETPLATFORM alpine:3.20.2 as runtime
 WORKDIR /linkerd
 RUN apk add \
     # For inotifywait