diff --git a/build/docker/DendriteJS.Dockerfile b/build/docker/DendriteJS.Dockerfile
index 5e1cffcad4..c01e038c43 100644
--- a/build/docker/DendriteJS.Dockerfile
+++ b/build/docker/DendriteJS.Dockerfile
@@ -94,7 +94,7 @@ RUN echo $'\
     } \n\
     }' > webapp/config.json
 
-FROM nginx
+FROM nginx:1.23.1
 # Add "Service-Worker-Allowed: /" header so the worker can sniff traffic on this domain rather
 # than just the path this gets hosted under. NB this newline echo syntax only works on bash.
 SHELL ["/bin/bash", "-c"]