diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 48a0491aa..23f6f560a 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -215,7 +215,7 @@ jobs:
       - name: Install Node.js
         uses: actions/setup-node@249970729cb0ef3589644e2896645e5dc5ba9c38 # v6.5.0
         with:
-          node-version: "24"
+          node-version: "24.22.1"
 
       - name: Install dependencies
         run: cd src/frontend/ && npm ci --ignore-scripts
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 09699a419..191e20573 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -8,9 +8,11 @@ and this project adheres to
 
 ## [Unreleased]
 
-## [1.36.1] - 2026-10-21
+### Fixed
 
-### Added
+- 🔒️(frontend) upgrade Node to 22.23.4 and 24.22.1 security releases
+
+## [1.36.1] - 2026-10-21
 
 ### Changed
 
diff --git a/Dockerfile b/Dockerfile
index 509f47e4f..abaa03ae5 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -39,7 +39,7 @@ RUN --mount=type=cache,target=/root/.cache/uv \
   uv sync --locked --no-dev
 
 # ---- mails ----
-FROM node:22-alpine AS mail-builder
+FROM node:22.23.4-alpine AS mail-builder
 
 RUN apk upgrade --no-cache ca-certificates
 
diff --git a/compose.yml b/compose.yml
index 15de865bc..4a5189cd7 100644
--- a/compose.yml
+++ b/compose.yml
@@ -175,7 +175,7 @@ services:
     working_dir: /app
 
   node:
-    image: node:22-alpine
+    image: node:22.23.4-alpine
     user: "${DOCKER_USER:-1000}"
     environment:
       HOME: /tmp
diff --git a/docker/dinum-frontend/Dockerfile b/docker/dinum-frontend/Dockerfile
index 883dfb7a5..2c0bcf86d 100644
--- a/docker/dinum-frontend/Dockerfile
+++ b/docker/dinum-frontend/Dockerfile
@@ -1,5 +1,5 @@
 # ---- Front-end image ----
-FROM node:22-alpine AS frontend-deps
+FROM node:22.23.4-alpine AS frontend-deps
 
 RUN apk upgrade --no-cache ca-certificates
 
diff --git a/src/frontend/Dockerfile b/src/frontend/Dockerfile
index 5ef119778..4cf5d34df 100644
--- a/src/frontend/Dockerfile
+++ b/src/frontend/Dockerfile
@@ -1,4 +1,4 @@
-FROM node:22-alpine AS frontend-deps
+FROM node:22.23.4-alpine AS frontend-deps
 
 RUN apk upgrade --no-cache ca-certificates
 
diff --git a/src/mail/package.json b/src/mail/package.json
index 3f4d0d840..ed0b05d53 100644
--- a/src/mail/package.json
+++ b/src/mail/package.json
@@ -14,7 +14,7 @@
     "build": "npm run build-mjml-to-html && npm run build-html-to-plain-text"
   },
   "volta": {
-    "node": "24.13.1"
+    "node": "24.22.1"
   },
   "repository": "https://github.com/suitenumerique/meet",
   "author": "DINUM",