diff --git a/Dockerfile b/Dockerfile
index 0001fc3..f248324 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -8,7 +8,7 @@
 # Nothing failed, which is what made it dangerous. Building here removes the
 # possibility rather than relying on remembering.
 
-FROM node:22-slim AS build
+FROM node:22.23.2-slim AS build
 WORKDIR /app
 COPY package.json package-lock.json ./
 RUN npm ci
@@ -16,7 +16,7 @@ COPY tsconfig.json ./
 COPY src/ src/
 RUN npm run build
 
-FROM node:22-slim
+FROM node:22.23.2-slim
 WORKDIR /app
 COPY package.json package-lock.json ./
 RUN npm ci --omit=dev