diff --git a/Dockerfile b/Dockerfile
index 352e8c4..3a37fc7 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,5 +1,8 @@
 FROM python:3.13.3-slim
 
+# Patch OS-level vulnerabilities in base image
+RUN DEBIAN_FRONTEND=noninteractive apt-get update && apt-get upgrade -y && rm -rf /var/lib/apt/lists/*
+
 WORKDIR /app
 
 # Install backend deps first for better layer caching