diff --git a/platform/vuln-scanner/deployment.yaml b/platform/vuln-scanner/deployment.yaml
index 094908c..2bbf312 100644
--- a/platform/vuln-scanner/deployment.yaml
+++ b/platform/vuln-scanner/deployment.yaml
@@ -109,7 +109,7 @@ spec:
           # (19 days old; 3.14.10-alpine, the current 3.14-alpine, was built 2026-11-05 and is under
           # the 7-day age applied here by hand). Tracked by the `kubernetes` Renovate manager.
           # Runs as 65532 from this pod's securityContext; the image's default is root, overridden.
-          image: docker.io/library/python:3.14.9-alpine@sha256:dbeb11d16bb95c3a7e3c25c842cb9f20cbc8c18f8be0461a4a0dcc861ad386a0
+          image: docker.io/library/python:3.15.2-alpine@sha256:0f9552bb28711333da16915ec146f5e6bb44a7fdac9ced15dc17c2e0206346dd
           imagePullPolicy: IfNotPresent
           command:
             - python3