diff --git a/Containerfile.acm.konflux b/Containerfile.acm.konflux
index 8bdf8e52eb..14aca753da 100644
--- a/Containerfile.acm.konflux
+++ b/Containerfile.acm.konflux
@@ -1,4 +1,4 @@
-FROM registry.redhat.io/ubi9/nodejs-24-minimal@sha256:920a22bf794c1e3806b1279a26337ba02d18af7370df18045f5ffd5bf5d54dbc AS builder
+FROM registry.redhat.io/ubi9/nodejs-24-minimal@sha256:db6b235ed5ff08db78a85979377ba4e5241d032b375c945b1b1746d7a7fd9e24 AS builder
 
 USER root
 ENV NPM_CONFIG_NODEDIR=/usr
@@ -16,7 +16,7 @@ RUN cd frontend && npm run build:plugin:acm && npm cache clean --force
 # Remove build-time dependencies before packaging
 RUN cd backend && npm ci --omit=optional --only=production --unsafe-perm --ignore-scripts
 
-FROM registry.redhat.io/ubi9/nodejs-24-minimal@sha256:920a22bf794c1e3806b1279a26337ba02d18af7370df18045f5ffd5bf5d54dbc
+FROM registry.redhat.io/ubi9/nodejs-24-minimal@sha256:db6b235ed5ff08db78a85979377ba4e5241d032b375c945b1b1746d7a7fd9e24
 
 WORKDIR /app
 ENV NODE_ENV production
diff --git a/Containerfile.mce.konflux b/Containerfile.mce.konflux
index e25775d599..933408c4bc 100644
--- a/Containerfile.mce.konflux
+++ b/Containerfile.mce.konflux
@@ -1,4 +1,4 @@
-FROM registry.redhat.io/ubi9/nodejs-24-minimal@sha256:920a22bf794c1e3806b1279a26337ba02d18af7370df18045f5ffd5bf5d54dbc AS builder
+FROM registry.redhat.io/ubi9/nodejs-24-minimal@sha256:db6b235ed5ff08db78a85979377ba4e5241d032b375c945b1b1746d7a7fd9e24 AS builder
 
 USER root
 ENV NPM_CONFIG_NODEDIR=/usr
@@ -16,7 +16,7 @@ RUN cd frontend && npm run build:plugin:mce
 # Remove build-time dependencies before packaging
 RUN cd backend && npm ci --omit=optional --only=production --unsafe-perm --ignore-scripts
 
-FROM registry.redhat.io/ubi9/nodejs-24-minimal@sha256:920a22bf794c1e3806b1279a26337ba02d18af7370df18045f5ffd5bf5d54dbc
+FROM registry.redhat.io/ubi9/nodejs-24-minimal@sha256:db6b235ed5ff08db78a85979377ba4e5241d032b375c945b1b1746d7a7fd9e24
 
 WORKDIR /app
 ENV NODE_ENV production
diff --git a/Dockerfile.mce.prow b/Dockerfile.mce.prow
index 7883feecc1..5c7e533733 100644
--- a/Dockerfile.mce.prow
+++ b/Dockerfile.mce.prow
@@ -1,12 +1,12 @@
 # Copyright Contributors to the Open Cluster Management project
 
-FROM registry.redhat.io/ubi9/nodejs-24-minimal@sha256:920a22bf794c1e3806b1279a26337ba02d18af7370df18045f5ffd5bf5d54dbc as dynamic-plugin
+FROM registry.redhat.io/ubi9/nodejs-24-minimal@sha256:db6b235ed5ff08db78a85979377ba4e5241d032b375c945b1b1746d7a7fd9e24 as dynamic-plugin
 WORKDIR /app/frontend
 COPY ./frontend .
 RUN npm ci --legacy-peer-deps --ignore-scripts
 RUN npm run build:plugin:mce
 
-FROM registry.redhat.io/ubi9/nodejs-24-minimal@sha256:920a22bf794c1e3806b1279a26337ba02d18af7370df18045f5ffd5bf5d54dbc as backend
+FROM registry.redhat.io/ubi9/nodejs-24-minimal@sha256:db6b235ed5ff08db78a85979377ba4e5241d032b375c945b1b1746d7a7fd9e24 as backend
 WORKDIR /app/backend
 # Copy only package.json and package-lock.json so that the docker layer cache only changes if those change
 # This will cause the npm ci to only rerun if the package.json or package-lock.json changes
@@ -15,12 +15,12 @@ RUN npm ci --omit=optional --ignore-scripts
 COPY ./backend .
 RUN npm run build
 
-FROM registry.redhat.io/ubi9/nodejs-24-minimal@sha256:920a22bf794c1e3806b1279a26337ba02d18af7370df18045f5ffd5bf5d54dbc as production
+FROM registry.redhat.io/ubi9/nodejs-24-minimal@sha256:db6b235ed5ff08db78a85979377ba4e5241d032b375c945b1b1746d7a7fd9e24 as production
 WORKDIR /app/backend
 COPY ./backend/package-lock.json ./backend/package.json ./
 RUN npm ci --omit=optional --only=production --ignore-scripts
 
-FROM registry.redhat.io/ubi9/nodejs-24-minimal@sha256:920a22bf794c1e3806b1279a26337ba02d18af7370df18045f5ffd5bf5d54dbc
+FROM registry.redhat.io/ubi9/nodejs-24-minimal@sha256:db6b235ed5ff08db78a85979377ba4e5241d032b375c945b1b1746d7a7fd9e24
 WORKDIR /app
 ENV NODE_ENV production
 COPY --from=production /app/backend/node_modules ./node_modules
diff --git a/Dockerfile.prow b/Dockerfile.prow
index 94633a8280..2a66e6b115 100644
--- a/Dockerfile.prow
+++ b/Dockerfile.prow
@@ -1,12 +1,12 @@
 # Copyright Contributors to the Open Cluster Management project
 
-FROM registry.redhat.io/ubi9/nodejs-24-minimal@sha256:920a22bf794c1e3806b1279a26337ba02d18af7370df18045f5ffd5bf5d54dbc as dynamic-plugin
+FROM registry.redhat.io/ubi9/nodejs-24-minimal@sha256:db6b235ed5ff08db78a85979377ba4e5241d032b375c945b1b1746d7a7fd9e24 as dynamic-plugin
 WORKDIR /app/frontend
 COPY ./frontend .
 RUN npm ci --legacy-peer-deps --ignore-scripts
 RUN npm run build:plugin:acm
 
-FROM registry.redhat.io/ubi9/nodejs-24-minimal@sha256:920a22bf794c1e3806b1279a26337ba02d18af7370df18045f5ffd5bf5d54dbc as backend
+FROM registry.redhat.io/ubi9/nodejs-24-minimal@sha256:db6b235ed5ff08db78a85979377ba4e5241d032b375c945b1b1746d7a7fd9e24 as backend
 WORKDIR /app/backend
 # Copy only package.json and package-lock.json so that the docker layer cache only changes if those change
 # This will cause the npm ci to only rerun if the package.json or package-lock.json changes
@@ -15,12 +15,12 @@ RUN npm ci --omit=optional --ignore-scripts
 COPY ./backend .
 RUN npm run build
 
-FROM registry.redhat.io/ubi9/nodejs-24-minimal@sha256:920a22bf794c1e3806b1279a26337ba02d18af7370df18045f5ffd5bf5d54dbc as production
+FROM registry.redhat.io/ubi9/nodejs-24-minimal@sha256:db6b235ed5ff08db78a85979377ba4e5241d032b375c945b1b1746d7a7fd9e24 as production
 WORKDIR /app/backend
 COPY ./backend/package-lock.json ./backend/package.json ./
 RUN npm ci --omit=optional --only=production --ignore-scripts
 
-FROM registry.redhat.io/ubi9/nodejs-24-minimal@sha256:920a22bf794c1e3806b1279a26337ba02d18af7370df18045f5ffd5bf5d54dbc
+FROM registry.redhat.io/ubi9/nodejs-24-minimal@sha256:db6b235ed5ff08db78a85979377ba4e5241d032b375c945b1b1746d7a7fd9e24
 WORKDIR /app
 ENV NODE_ENV production
 COPY --from=production /app/backend/node_modules ./node_modules