diff --git a/alpine/hotspot/Dockerfile b/alpine/hotspot/Dockerfile
index 44adb735aa..d183cb3b3d 100644
--- a/alpine/hotspot/Dockerfile
+++ b/alpine/hotspot/Dockerfile
@@ -1,4 +1,4 @@
-ARG ALPINE_TAG=3.20.2
+ARG ALPINE_TAG=3.20.3
 
 FROM alpine:"${ALPINE_TAG}" AS jre-build
 
diff --git a/docker-bake.hcl b/docker-bake.hcl
index 33f80ecf07..f7a170cf7a 100644
--- a/docker-bake.hcl
+++ b/docker-bake.hcl
@@ -100,7 +100,7 @@ variable "COMMIT_SHA" {
 }
 
 variable "ALPINE_FULL_TAG" {
-  default = "3.20.2"
+  default = "3.20.3"
 }
 
 variable "ALPINE_SHORT_TAG" {