diff --git a/tools/reverse-proxy/Dockerfile b/tools/reverse-proxy/Dockerfile
index e8b98360..653190e5 100644
--- a/tools/reverse-proxy/Dockerfile
+++ b/tools/reverse-proxy/Dockerfile
@@ -1,5 +1,8 @@
 FROM nginx:alpine
 
+# Upgrade base Alpine packages to latest security builds (openssl/libssl3/libcrypto3, musl, zlib, libxml2, libexpat, nghttp2)
+RUN apk upgrade --no-cache
+
 # Install wget for healthcheck, gettext for envsubst, and openssl for fallback cert generation
 RUN apk add --no-cache wget gettext openssl