diff --git a/CHANGELOG.md b/CHANGELOG.md
index 5f3935e..0313915 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -10,6 +10,7 @@ and this project adheres to
 
 ### Added
 
+- ⬆️(nginx) bump nginx-unprivileged to 1.27 #797
 - ✨(teams) allow broadly available teams #796
 - ✨(teams) update and enhance team invitation email
 - ✨(api) define dimail timeout as a setting
diff --git a/Dockerfile b/Dockerfile
index c6b6571..8c7dea0 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -39,7 +39,7 @@ FROM frontend-builder-dev AS frontend-builder
 RUN yarn build
 
 # ---- Front-end image ----
-FROM nginxinc/nginx-unprivileged:1.26-alpine AS frontend-production
+FROM nginxinc/nginx-unprivileged:1.27-alpine AS frontend-production
 
 USER root