diff --git a/Dockerfile.buf b/Dockerfile.buf
index b1a5468db2..e6fc2f367b 100644
--- a/Dockerfile.buf
+++ b/Dockerfile.buf
@@ -13,7 +13,7 @@ ARG TARGETARCH
 RUN CGO_ENABLED=0 GOOS=${TARGETOS} GOARCH=${TARGETARCH} \
   go build -ldflags "-s -w" -trimpath -buildvcs=false -o /go/bin/buf ./cmd/buf
 
-FROM --platform=${TARGETPLATFORM} alpine:3.21.2
+FROM --platform=${TARGETPLATFORM} alpine:3.21.3
 
 RUN apk add --update --no-cache \
     ca-certificates \