diff --git a/cmd/metaconvert/Dockerfile b/cmd/metaconvert/Dockerfile
index 67358ebb282..0dbea42eca9 100644
--- a/cmd/metaconvert/Dockerfile
+++ b/cmd/metaconvert/Dockerfile
@@ -3,7 +3,7 @@
 # Provenance-includes-license: Apache-2.0
 # Provenance-includes-copyright: The Cortex Authors.
 
-FROM       alpine:3.21.0
+FROM       alpine:3.21.2
 ARG        EXTRA_PACKAGES
 RUN        apk add --no-cache ca-certificates tzdata $EXTRA_PACKAGES
 # Expose TARGETOS and TARGETARCH variables. These are supported by Docker when using BuildKit, but must be "enabled" using ARG.
diff --git a/cmd/mimir/Dockerfile.alpine b/cmd/mimir/Dockerfile.alpine
index 156a419c827..351316dcbcc 100644
--- a/cmd/mimir/Dockerfile.alpine
+++ b/cmd/mimir/Dockerfile.alpine
@@ -3,7 +3,7 @@
 # Provenance-includes-license: Apache-2.0
 # Provenance-includes-copyright: The Cortex Authors.
 
-FROM       alpine:3.21.0
+FROM       alpine:3.21.2
 ARG        EXTRA_PACKAGES
 RUN        apk add --no-cache ca-certificates tzdata $EXTRA_PACKAGES
 # Expose TARGETOS and TARGETARCH variables. These are supported by Docker when using BuildKit, but must be "enabled" using ARG.
diff --git a/cmd/mimir/Dockerfile.continuous-test b/cmd/mimir/Dockerfile.continuous-test
index 65187bf7c3b..7207b78f440 100644
--- a/cmd/mimir/Dockerfile.continuous-test
+++ b/cmd/mimir/Dockerfile.continuous-test
@@ -1,6 +1,6 @@
 # SPDX-License-Identifier: AGPL-3.0-only
 
-FROM       alpine:3.21.0
+FROM       alpine:3.21.2
 ARG        EXTRA_PACKAGES
 RUN        apk add --no-cache ca-certificates tzdata $EXTRA_PACKAGES
 # Expose TARGETOS and TARGETARCH variables. These are supported by Docker when using BuildKit, but must be "enabled" using ARG.
diff --git a/cmd/mimirtool/Dockerfile b/cmd/mimirtool/Dockerfile
index 73653218be3..794361ce6bd 100644
--- a/cmd/mimirtool/Dockerfile
+++ b/cmd/mimirtool/Dockerfile
@@ -1,6 +1,6 @@
 # SPDX-License-Identifier: Apache-2.0
 
-FROM       alpine:3.21.0
+FROM       alpine:3.21.2
 ARG        EXTRA_PACKAGES
 RUN        apk add --no-cache ca-certificates tzdata $EXTRA_PACKAGES
 # Expose TARGETOS and TARGETARCH variables. These are supported by Docker when using BuildKit, but must be "enabled" using ARG.
diff --git a/cmd/query-tee/Dockerfile b/cmd/query-tee/Dockerfile
index 8584716ef13..ae7f4175445 100644
--- a/cmd/query-tee/Dockerfile
+++ b/cmd/query-tee/Dockerfile
@@ -3,7 +3,7 @@
 # Provenance-includes-license: Apache-2.0
 # Provenance-includes-copyright: The Cortex Authors.
 
-FROM       alpine:3.21.0
+FROM       alpine:3.21.2
 ARG        EXTRA_PACKAGES
 RUN        apk add --no-cache ca-certificates tzdata $EXTRA_PACKAGES
 # Expose TARGETOS and TARGETARCH variables. These are supported by Docker when using BuildKit, but must be "enabled" using ARG.
diff --git a/development/mimir-ingest-storage/dev.dockerfile b/development/mimir-ingest-storage/dev.dockerfile
index 2572deb6dab..320ee56e4d0 100644
--- a/development/mimir-ingest-storage/dev.dockerfile
+++ b/development/mimir-ingest-storage/dev.dockerfile
@@ -3,7 +3,7 @@ FROM $BUILD_IMAGE
 ENV CGO_ENABLED=0
 RUN go install github.com/go-delve/delve/cmd/dlv@v1.22.0
 
-FROM alpine:3.21.0
+FROM alpine:3.21.2
 
 RUN     mkdir /mimir
 WORKDIR /mimir
diff --git a/development/mimir-microservices-mode/dev.dockerfile b/development/mimir-microservices-mode/dev.dockerfile
index 63eea13f8e6..ac1b3d3c3f9 100644
--- a/development/mimir-microservices-mode/dev.dockerfile
+++ b/development/mimir-microservices-mode/dev.dockerfile
@@ -3,7 +3,7 @@ FROM $BUILD_IMAGE
 ENV CGO_ENABLED=0
 RUN go install github.com/go-delve/delve/cmd/dlv@v1.23.0
 
-FROM alpine:3.21.0
+FROM alpine:3.21.2
 
 RUN     mkdir /mimir
 WORKDIR /mimir
diff --git a/development/mimir-monolithic-mode-with-swift-storage/dev.dockerfile b/development/mimir-monolithic-mode-with-swift-storage/dev.dockerfile
index 56b8fccb452..046e4316d78 100644
--- a/development/mimir-monolithic-mode-with-swift-storage/dev.dockerfile
+++ b/development/mimir-monolithic-mode-with-swift-storage/dev.dockerfile
@@ -1,4 +1,4 @@
-FROM alpine:3.21.0
+FROM alpine:3.21.2
 
 RUN     mkdir /mimir
 WORKDIR /mimir
diff --git a/development/mimir-monolithic-mode/dev.dockerfile b/development/mimir-monolithic-mode/dev.dockerfile
index 8f5ba3f70ee..b42d07003be 100644
--- a/development/mimir-monolithic-mode/dev.dockerfile
+++ b/development/mimir-monolithic-mode/dev.dockerfile
@@ -1,4 +1,4 @@
-FROM alpine:3.21.0
+FROM alpine:3.21.2
 
 RUN     mkdir /mimir
 WORKDIR /mimir
diff --git a/development/mimir-read-write-mode/dev.dockerfile b/development/mimir-read-write-mode/dev.dockerfile
index 2572deb6dab..320ee56e4d0 100644
--- a/development/mimir-read-write-mode/dev.dockerfile
+++ b/development/mimir-read-write-mode/dev.dockerfile
@@ -3,7 +3,7 @@ FROM $BUILD_IMAGE
 ENV CGO_ENABLED=0
 RUN go install github.com/go-delve/delve/cmd/dlv@v1.22.0
 
-FROM alpine:3.21.0
+FROM alpine:3.21.2
 
 RUN     mkdir /mimir
 WORKDIR /mimir
diff --git a/tools/copyblocks/Dockerfile b/tools/copyblocks/Dockerfile
index 2eb4721b704..d0b03e663f4 100644
--- a/tools/copyblocks/Dockerfile
+++ b/tools/copyblocks/Dockerfile
@@ -1,6 +1,6 @@
 # SPDX-License-Identifier: AGPL-3.0-only
 
-FROM       alpine:3.21.0
+FROM       alpine:3.21.2
 ARG        EXTRA_PACKAGES
 RUN        apk add --no-cache ca-certificates tzdata $EXTRA_PACKAGES
 # Expose TARGETOS and TARGETARCH variables. These are supported by Docker when using BuildKit, but must be "enabled" using ARG.