diff --git a/Dockerfile b/Dockerfile
index 4da63c50ff..8939f2b525 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -44,7 +44,7 @@ RUN cargo install --locked --bin defguard --path ./crates/defguard --root /build
 
 # run
 FROM public.ecr.aws/docker/library/debian:13-slim
-RUN apt-get update -y && \
+RUN apt-get update -y && apt-get upgrade -y && \
     apt-get install --no-install-recommends -y ca-certificates libssl-dev && \
     rm -rf /var/lib/apt/lists/*
 WORKDIR /app