diff --git a/build.gradle b/build.gradle
index 9c34f3864..c3e9abc1c 100644
--- a/build.gradle
+++ b/build.gradle
@@ -119,7 +119,7 @@ allprojects {
         implementation "org.bouncycastle:bcpkix-jdk18on:1.78"
         implementation "org.bouncycastle:bcprov-jdk18on:1.78"
 
-        implementation "com.h2database:h2:2.1.214"
+        implementation "com.h2database:h2:2.2.224"
         implementation "com.zaxxer:HikariCP:5.0.1"
 
         implementation "org.hsqldb:hsqldb:2.7.1"
diff --git a/cvss-suppressions.xml b/cvss-suppressions.xml
index 1cee3e334..b3feeea41 100644
--- a/cvss-suppressions.xml
+++ b/cvss-suppressions.xml
@@ -11,10 +11,9 @@
     </suppress>
     <suppress>
         <notes><![CDATA[
-   file name: h2-2.1.214.jar (pkg:maven/com.h2database/h2@2.1.214, cpe:2.3:a:h2database:h2:2.1.214:*:*:*:*:*:*:*) : CVE-2022-45868
+   file name: h2-2.2.224.jar (pkg:maven/com.h2database/h2@2.2.224, cpe:2.3:a:h2database:h2:2.2.224:*:*:*:*:*:*:*) : CVE-2018-14335
    ]]></notes>
         <packageUrl regex="true">^pkg:maven/com\.h2database/h2@.*$</packageUrl>
-        <cve>CVE-2022-45868</cve>
         <cve>CVE-2018-14335</cve>
     </suppress>
     <suppress>
diff --git a/docker/tessera.Dockerfile b/docker/tessera.Dockerfile
index 2953d536b..f175ab73d 100644
--- a/docker/tessera.Dockerfile
+++ b/docker/tessera.Dockerfile
@@ -1,5 +1,5 @@
 # Create Tessera installation from pre-built .tar distributions
-FROM alpine:3.13 as extractor
+FROM alpine:3.20 as extractor
 
 COPY . /ctx/