diff --git a/packages/deployment/Dockerfile.sdk b/packages/deployment/Dockerfile.sdk
index 0430e2b160e..8727cf3a818 100644
--- a/packages/deployment/Dockerfile.sdk
+++ b/packages/deployment/Dockerfile.sdk
@@ -18,7 +18,7 @@ RUN --mount=type=cache,target=$GOCACHE make GIT_COMMIT="$GIT_COMMIT" GIT_REVISIO
 # OTEL fetch
 # from https://github.com/open-telemetry/opentelemetry-collector-releases/releases
 
-FROM node:18-bullseye AS otel
+FROM node:18.19-bullseye AS otel
 
 ARG OTEL_VERSION=0.48.0
 ARG OTEL_HASH_arm64=846852f4c34f6e494abe202402fdf1d17e2ec3c7a7f96985b6011126ae553249
@@ -33,7 +33,7 @@ RUN set -eux; \
 
 ###############################
 # @agoric/cosmos package
-FROM node:18-bullseye AS cosmos-package
+FROM node:18.19-bullseye AS cosmos-package
 ENV YARN_CACHE_FOLDER=/root/.yarn
 
 WORKDIR /usr/src/agoric-sdk/golang/cosmos
@@ -57,7 +57,7 @@ RUN mkdir golang/tmp && \
 
 ###############################
 # @agoric/xsnap package
-FROM node:18-bullseye AS xsnap-package
+FROM node:18.19-bullseye AS xsnap-package
 ENV YARN_CACHE_FOLDER=/root/.yarn
 
 # When changing/adding entries here, make sure to search the whole project for
@@ -88,7 +88,7 @@ RUN rm -rf packages/xsnap/moddable packages/xsnap/xsnap-native/build/tmp
 
 ###############################
 # The js build container
-FROM node:18-bullseye AS build-js
+FROM node:18.19-bullseye AS build-js
 ENV YARN_CACHE_FOLDER=/root/.yarn
 
 WORKDIR /usr/src/agoric-sdk
@@ -113,7 +113,7 @@ RUN yarn lerna run --ignore "@agoric/xsnap" build
 
 ###############################
 # The install container.
-FROM node:18-bullseye AS install
+FROM node:18.19-bullseye AS install
 
 # Install some conveniences.
 RUN apt-get --allow-releaseinfo-change update && apt-get install -y vim jq less && apt-get clean -y