diff --git a/compileflow-workbench/docker/Dockerfile.local-gateway b/compileflow-workbench/docker/Dockerfile.local-gateway
index 7252b647..339aae4f 100644
--- a/compileflow-workbench/docker/Dockerfile.local-gateway
+++ b/compileflow-workbench/docker/Dockerfile.local-gateway
@@ -1,5 +1,5 @@
 # Loopback-only gateway used by the split Docker Compose evaluation topology.
-FROM nginx:1.30.4-alpine3.24@sha256:97d490c12ba55b4946b01546d1c3ed324e8d41ab1c9fcb2a616aa470620e5b46
+FROM nginx:1.31-alpine3.24@sha256:df221db836e1754089190208cee7eeda94f233197056426eda74a43ab1abeac2
 RUN chown -R nginx:nginx \
     /etc/nginx/conf.d \
     /var/cache/nginx \
diff --git a/compileflow-workbench/docker/Dockerfile.web b/compileflow-workbench/docker/Dockerfile.web
index 3126669d..f5c2a226 100644
--- a/compileflow-workbench/docker/Dockerfile.web
+++ b/compileflow-workbench/docker/Dockerfile.web
@@ -14,7 +14,7 @@ ENV VITE_COMPILEFLOW_DEBUG=$VITE_COMPILEFLOW_DEBUG
 ENV VITE_COMPILEFLOW_USE_BUILT_IN_EXAMPLES=$VITE_COMPILEFLOW_USE_BUILT_IN_EXAMPLES
 RUN pnpm --filter @compileflow/workbench-web build
 
-FROM nginx:1.30.4-alpine3.24@sha256:97d490c12ba55b4946b01546d1c3ed324e8d41ab1c9fcb2a616aa470620e5b46
+FROM nginx:1.31-alpine3.24@sha256:df221db836e1754089190208cee7eeda94f233197056426eda74a43ab1abeac2
 RUN chown -R nginx:nginx /var/cache/nginx /var/run /var/log/nginx
 COPY docker/nginx.web.conf /etc/nginx/conf.d/default.conf
 COPY --from=build /app/apps/web/dist /usr/share/nginx/html