diff --git a/Dockerfile b/Dockerfile
index 51b7bc4e1338ff14d7fb75c5d079ea7019bd80d3..c8ddc6d271ba06b2e595e210762f033d7408bc9d 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,6 +1,6 @@
 ARG BASE_REGISTRY=registry1.dso.mil
 ARG BASE_IMAGE=ironbank/opensource/nodejs/nodejs14
-ARG BASE_TAG=14.16.0
+ARG BASE_TAG=14.17.0
 
 # Friends don't let friends bloat containers
 FROM ${BASE_REGISTRY}/${BASE_IMAGE}:${BASE_TAG} as extractor
diff --git a/hardening_manifest.yaml b/hardening_manifest.yaml
index 2773dcd579ee6e790029174fd1f1ad6e67472a82..6d1141cb67d21daf6d6cfdc96cd068e86258a0f4 100644
--- a/hardening_manifest.yaml
+++ b/hardening_manifest.yaml
@@ -14,7 +14,7 @@ tags:
 # Build args passed to Dockerfile ARGs
 args:
   BASE_IMAGE: "opensource/nodejs/nodejs14"
-  BASE_TAG: "14.16.0"
+  BASE_TAG: "14.17.0"
 
 # Docker image labels
 labels: