diff --git a/service/nginx/Containerfile b/service/nginx/Containerfile
index f5421e8..1adfab0 100644
--- a/service/nginx/Containerfile
+++ b/service/nginx/Containerfile
@@ -1,5 +1,5 @@
 FROM docker.io/debian:bookworm-slim@sha256:f80c45482c8d147da87613cb6878a7238b8642bcc24fc11bad78c7bec726f340
-ARG VERSION=1.25 # renovate: datasource=github-tags depName=nginx/nginx extractVersion=^release-(?<version>.*)$
+ARG VERSION=1.25.3 # renovate: datasource=github-tags depName=nginx/nginx extractVersion=^release-(?<version>.*)$
 
 RUN apt-get update -y && apt-get install -y --no-install-recommends ca-certificates
 ADD --chown=_apt https://nginx.org/keys/nginx_signing.key /etc/apt/trusted.gpg.d/nginx.asc