diff --git a/docker/Dockerfile b/docker/Dockerfile
index 3325d06..b7dfc82 100644
--- a/docker/Dockerfile
+++ b/docker/Dockerfile
@@ -1,5 +1,5 @@
 # Build stage
-FROM golang:1.26.8-alpine@sha256:ce864e7223ac17b1775e6fd0b4c0db580c2eb50e7953a427916379e4b92a1628 AS builder
+FROM golang:1.27.1-alpine@sha256:cf6fca6641884b8433441b2b0652976f975e1d0fdd26d177eaaf8596087f3125 AS builder
 
 WORKDIR /app
 
@@ -19,7 +19,7 @@ COPY server-go/*.go ./
 RUN CGO_ENABLED=0 GOOS=linux go build -a -installsuffix cgo -o fcaptcha-server .
 
 # Runtime stage
-FROM alpine:3.23.5@sha256:fd791d74b68913cbb027c6546007b3f0d3bc45125f797758156952bc2d6daf40
+FROM alpine:3.24.1@sha256:28bd5fe8b56d1bd048e5babf5b10710ebe0bae67db86916198a6eec434943f8b
 
 RUN apk --no-cache add ca-certificates tzdata
 
diff --git a/server-go/Dockerfile b/server-go/Dockerfile
index f5f97db..cc52934 100644
--- a/server-go/Dockerfile
+++ b/server-go/Dockerfile
@@ -1,4 +1,4 @@
-FROM golang:1.26.8-alpine@sha256:ce864e7223ac17b1775e6fd0b4c0db580c2eb50e7953a427916379e4b92a1628 AS builder
+FROM golang:1.27.1-alpine@sha256:cf6fca6641884b8433441b2b0652976f975e1d0fdd26d177eaaf8596087f3125 AS builder
 
 WORKDIR /app
 
@@ -9,7 +9,7 @@ COPY server-go/*.go .
 
 RUN CGO_ENABLED=0 GOOS=linux go build -a -installsuffix cgo -o fcaptcha-server .
 
-FROM alpine:3.23.5@sha256:fd791d74b68913cbb027c6546007b3f0d3bc45125f797758156952bc2d6daf40
+FROM alpine:3.24.1@sha256:28bd5fe8b56d1bd048e5babf5b10710ebe0bae67db86916198a6eec434943f8b
 
 RUN apk --no-cache add ca-certificates tzdata
 
diff --git a/server-node/Dockerfile b/server-node/Dockerfile
index 111d83f..5629b7f 100644
--- a/server-node/Dockerfile
+++ b/server-node/Dockerfile
@@ -9,7 +9,7 @@
 # resolves the widget at ../client/fcaptcha.js relative to its own directory, so
 # keeping server-node/ and client/ as siblings means it works with no
 # configuration, exactly as it does from a checkout.
-FROM node:24-alpine@sha256:50c8e8ca1d27439048670df5883f32d57cf81cff6233222c893fd0d9884cbd81
+FROM node:26-alpine@sha256:ef24c5053d50fdc3e4e56eb4e7ddb7861874ab0fdc797046ba897581deb8e868
 
 WORKDIR /app/server-node
 
diff --git a/server-python/Dockerfile b/server-python/Dockerfile
index efcd6c6..f04491b 100644
--- a/server-python/Dockerfile
+++ b/server-python/Dockerfile
@@ -9,7 +9,7 @@
 # resolves the widget at ../client/fcaptcha.js relative to its own directory, so
 # keeping server-python/ and client/ as siblings means it works with no
 # configuration, exactly as it does from a checkout.
-FROM python:3.12.14-slim@sha256:78387bc3881b8273120a12ebe6c1ab22b018ccc2c9adf565ae1ac9b536e184ea
+FROM python:3.14.7-slim@sha256:cad9a2c871761c413caa6fdd6441c783451e740a48aaeba60ae62a8b53525ef6
 
 WORKDIR /app/server-python