diff --git a/Dockerfile b/Dockerfile
index 1231571..609f5d2 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -6,7 +6,9 @@ ENV PYTHONUNBUFFERED=1
 ENV PATH="/app/venv/bin:$PATH"
 
 # Install system dependencies required for Poetry
+# We're installing here libexpat1, to upgrade the package to include a fix to 3 high CVEs. CVE-2024-45491,CVE-2024-45490,CVE-2024-45492
 RUN apt-get update && \
+    && apt-get install -y --no-install-recommends libexpat1 \
     dpkg --add-architecture arm64
 
 # Set the working directory