diff --git a/Dockerfile b/Dockerfile
index 5c0ba4e..e8eab4a 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -5,7 +5,7 @@
 #
 # The app is deliberately insecure. Publish the port on 127.0.0.1 only, as
 # above, and never serve it from a domain you care about.
-FROM python:3.13-slim@sha256:70729b46c69b4f1e97c4822c1af3df53a1476cf5ddc6c087c0c10bc3a5678c2f
+FROM python:3.15-slim@sha256:65a65fc7b30b06cb6df4930fd4650697cb23f4c2698ab81fc87e4b031bc36928
 
 WORKDIR /app
 COPY . .