diff --git a/CHANGELOG.md b/CHANGELOG.md
index d7f73a9..1793723 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -6,6 +6,10 @@ and this project adheres to [Semantic Versioning](http://semver.org/spec/v2.0.0.
 
 ## [Unreleased]
 
+### Security
+- Update Dockerfile base images, bump Apache cxf to 3.5.5
+  [cyberark/conjur-api-java#113](https://github.com/cyberark/conjur-api-java/issues/113)
+
 ## [3.0.3] - 2022-05-31
 
 ### Security
diff --git a/Dockerfile.nginx b/Dockerfile.nginx
index 744c164..380bda8 100644
--- a/Dockerfile.nginx
+++ b/Dockerfile.nginx
@@ -1,4 +1,4 @@
-FROM nginx:1.21.6
+FROM nginx:1.23.3
 
 MAINTAINER Conjur Inc
 
diff --git a/Dockerfile.test b/Dockerfile.test
index 317a8a9..4a85214 100644
--- a/Dockerfile.test
+++ b/Dockerfile.test
@@ -1,4 +1,4 @@
-FROM openjdk:17-jdk-bullseye
+FROM openjdk:21-slim
 
 MAINTAINER Conjur Inc
 
diff --git a/pom.xml b/pom.xml
index 2d47d2e..0f8b79e 100644
--- a/pom.xml
+++ b/pom.xml
@@ -160,7 +160,7 @@
       <dependency>
         <groupId>org.apache.cxf</groupId>
         <artifactId>cxf-rt-rs-client</artifactId>
-        <version>3.5.1</version>
+        <version>3.5.5</version>
       </dependency>
 
       <!-- JSON support -->