diff --git a/wireguard/Dockerfile b/wireguard/Dockerfile
index f109e04..1b2cb25 100755
--- a/wireguard/Dockerfile
+++ b/wireguard/Dockerfile
@@ -1,4 +1,4 @@
-ARG BUILD_FROM=ghcr.io/hassio-addons/base:12.2.3
+ARG BUILD_FROM=ghcr.io/hassio-addons/base:12.2.7
 # hadolint ignore=DL3006
 FROM ${BUILD_FROM}
 
@@ -10,10 +10,11 @@ SHELL ["/bin/bash", "-o", "pipefail", "-c"]
 RUN \
     apk add --no-cache --virtual .build-dependencies \
         build-base=0.5-r3 \
-        git=2.36.2-r0 \
+        git=2.36.3-r0 \
     \
     && apk add --no-cache \
-        go=1.18.5-r0 \
+        go=1.18.7-r0 \
+        iptables=1.8.8-r1 \
         libqrencode=4.1.1-r0 \
         openresolv=3.12.0-r0 \
         wireguard-tools=1.0.20210914-r0 \
diff --git a/wireguard/build.yaml b/wireguard/build.yaml
index 267709e..fa39b5c 100644
--- a/wireguard/build.yaml
+++ b/wireguard/build.yaml
@@ -1,10 +1,10 @@
 ---
 build_from:
-  aarch64: ghcr.io/hassio-addons/base:12.2.3
-  amd64: ghcr.io/hassio-addons/base:12.2.3
-  armhf: ghcr.io/hassio-addons/base:12.2.3
-  armv7: ghcr.io/hassio-addons/base:12.2.3
-  i386: ghcr.io/hassio-addons/base:12.2.3
+  aarch64: ghcr.io/hassio-addons/base:12.2.7
+  amd64: ghcr.io/hassio-addons/base:12.2.7
+  armhf: ghcr.io/hassio-addons/base:12.2.7
+  armv7: ghcr.io/hassio-addons/base:12.2.7
+  i386: ghcr.io/hassio-addons/base:12.2.7
 codenotary:
   base_image: codenotary@frenck.dev
   signer: codenotary@frenck.dev