diff --git a/Dockerfile b/Dockerfile
index 846eeb6a0ab1f7192d0734b9bbf0c17d7ed1a9b1..9969634ad8393c5eb41c7da8c3983e0b3fcc1d2b 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,6 +1,6 @@
 ARG BASE_REGISTRY=registry1.dso.mil
 ARG BASE_IMAGE=ironbank/opensource/nodejs/nodejs14
-ARG BASE_TAG=14.17.0
+ARG BASE_TAG=14.17.3
 
 # Friends don't let friends bloat containers
 FROM ${BASE_REGISTRY}/${BASE_IMAGE}:${BASE_TAG} as extractor
diff --git a/hardening_manifest.yaml b/hardening_manifest.yaml
index c835ba54452353bebda9cacf3aba804ec0e6ce3c..f287693c938a33eae4553e63aa3e0dbe5066326a 100644
--- a/hardening_manifest.yaml
+++ b/hardening_manifest.yaml
@@ -14,7 +14,7 @@ tags:
 # Build args passed to Dockerfile ARGs
 args:
   BASE_IMAGE: "opensource/nodejs/nodejs14"
-  BASE_TAG: "14.17.0"
+  BASE_TAG: "14.17.3"
 
 # Docker image labels
 labels: