diff --git a/vervet-underground/Dockerfile b/vervet-underground/Dockerfile
index 0fa8ac5b..786ab974 100644
--- a/vervet-underground/Dockerfile
+++ b/vervet-underground/Dockerfile
@@ -28,7 +28,7 @@ RUN --mount=type=cache,target=/root/.cache/go-build \
 # we're not changing anything, only making it explicit.
 # Thanks to emulation, this will also run on ARM Macs.
 # Advised to move from distroless to the secure base image - https://docs.google.com/document/d/1I-vxsuHlmBlM8JHSDpvOmVMGeQQcbPgb8jH1ELEE9wo/edit#heading=h.1xke9mez8zov
-FROM --platform=amd64 gcr.io/snyk-main/ubuntu-20:2.3.1_202403150706
+FROM --platform=amd64 gcr.io/snyk-main/ubuntu-20:2.3.7_202404190856
 
 COPY config.*.json /
 COPY --from=builder /go/bin/app /