diff --git a/Dockerfile b/Dockerfile
index 428b7a5b7d..5a33d4d13a 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -33,8 +33,8 @@ ARG DATE
 RUN echo ${COMMIT_HASH} > ./build/COMMIT_HASH && \
     echo ${DATE} > ./build/BUILD_DATE
 
-# production stage
-FROM gcr.io/iguazio/nginx-unprivileged:1.21-alpine as production-stage
+# production stage CVE free
+FROM gcr.io/nginxinc/nginx-unprivileged:1.29.1-alpine3.22 as production-stage
 
 # align UID & GID with nginx-unprivileged image UID & GID
 ARG UID=101