diff --git a/docker/Dockerfile b/docker/Dockerfile
index 2acce6b..e053d65 100755
--- a/docker/Dockerfile
+++ b/docker/Dockerfile
@@ -1,4 +1,4 @@
-FROM alpine:3.21
+FROM alpine:3.24
 
 # Install PHP and necessary extensions
 RUN apk add --no-cache curl php84 php84-fpm php84-opcache caddy php84-curl php84-xdebug chromium-chromedriver
@@ -30,5 +30,11 @@ RUN rm -rf /srv/.vscode
 # Copy the Caddyfile to the container
 COPY docker/Caddyfile /etc/caddy/Caddyfile
 
+# Security stopgap for GHSA-6wmf-4rv5-p3rp / GHSA-w8hw-w9fx-j79w (2026-10-21).
+# Keep upload progress off even after patching; fatal_error_backtraces only exists in PHP 8.5+.
+RUN for d in /usr/local/etc/php/conf.d /etc/php*/conf.d; do \
+      [ -d "$d" ] && printf 'session.upload_progress.enabled = 0\nfatal_error_backtraces = 0\n' > "$d/zz-security.ini"; \
+    done; true
+
 # Run start script
 CMD ["sh", "-c", "/start.sh"]