diff --git a/docs/proxy-login.md b/docs/proxy-login.md
index c2a8ae7..1577ed2 100644
--- a/docs/proxy-login.md
+++ b/docs/proxy-login.md
@@ -188,7 +188,7 @@ server {
 # web-terminal-kiro behind nginx, with a login. See docs/proxy-login.md.
 services:
   nginx:
-    image: nginx:1.31.6
+    image: nginx:1.31.7
     container_name: nginx
     restart: unless-stopped
     ports:
diff --git a/docs/reverse-proxy.md b/docs/reverse-proxy.md
index 6f30ccc..031b78e 100644
--- a/docs/reverse-proxy.md
+++ b/docs/reverse-proxy.md
@@ -193,7 +193,7 @@ nginx normally looks up the app's address once, when it starts. An update recrea
 # web-terminal-server behind nginx. See docs/reverse-proxy.md.
 services:
   nginx:
-    image: nginx:1.31.6
+    image: nginx:1.31.7
     container_name: nginx
     restart: unless-stopped
     ports:
diff --git a/examples/reverse-proxy/login/nginx/compose.yaml b/examples/reverse-proxy/login/nginx/compose.yaml
index f1cb9fc..b7d9520 100644
--- a/examples/reverse-proxy/login/nginx/compose.yaml
+++ b/examples/reverse-proxy/login/nginx/compose.yaml
@@ -1,7 +1,7 @@
 # web-terminal-kiro behind nginx, with a login. See docs/proxy-login.md.
 services:
   nginx:
-    image: nginx:1.31.6
+    image: nginx:1.31.7
     container_name: nginx
     restart: unless-stopped
     ports:
diff --git a/examples/reverse-proxy/nginx/compose.yaml b/examples/reverse-proxy/nginx/compose.yaml
index d91c89d..7209357 100644
--- a/examples/reverse-proxy/nginx/compose.yaml
+++ b/examples/reverse-proxy/nginx/compose.yaml
@@ -1,7 +1,7 @@
 # web-terminal-server behind nginx. See docs/reverse-proxy.md.
 services:
   nginx:
-    image: nginx:1.31.6
+    image: nginx:1.31.7
     container_name: nginx
     restart: unless-stopped
     ports: