diff --git a/Dockerfile b/Dockerfile
index 31817ef..57b99eb 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -45,12 +45,13 @@ RUN ((cat /etc/os-release | grep ID | grep alpine) && apk add --no-cache musl-de
     && rm -rf $CARGO_HOME/registry/
 
 # ----------------------
-# node 22.17.1 via https://github.com/nodejs/docker-node/blob/main/22/bookworm/Dockerfile
+# node 22.22.0 via https://github.com/nodejs/docker-node/blob/main/22/bookworm/Dockerfile
+# security fix: https://nodejs.org/en/blog/vulnerability/january-2026-dos-mitigation-async-hooks
 # ----------------------
 RUN groupadd --gid 1000 node \
   && useradd --uid 1000 --gid node --shell /bin/bash --create-home node
 
-ENV NODE_VERSION 22.17.1
+ENV NODE_VERSION 22.22.0
 
 RUN ARCH= && dpkgArch="$(dpkg --print-architecture)" \
   && case "${dpkgArch##*-}" in \