diff --git a/CHANGELOG.md b/CHANGELOG.md
index e037735..3ca92ce 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,10 @@
 # Changelog
 
+## 1.31.8
+
+* Update base image to `zappi/nginx:1.31.8`.
+* Upgrade `headers-more-nginx-module` to `v0.41`.
+
 ## 1.31.3-1
 
 * Return `X-Trace-ID` on every response, including `202` and `4xx`/`5xx`.
diff --git a/Dockerfile b/Dockerfile
index 68f84ec..608a20d 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,4 +1,4 @@
-FROM zappi/nginx:1.31.3 AS builder
+FROM zappi/nginx:1.31.8 AS builder
 
 USER root
 
@@ -16,17 +16,17 @@ RUN apt-get update -y && \
 WORKDIR /usr/src/
 
 # Download nginx source
-ARG NGINX_VERSION="1.31.3"
+ARG NGINX_VERSION="1.31.8"
 ARG NGINX_PKG="nginx-${NGINX_VERSION}.tar.gz"
-ARG NGINX_SHA="a7657c50811c2d92d9895395e8b873ef60398142c4db21eb647811c38f6dd525"
+ARG NGINX_SHA="0652b760b3b772d2ec17b47c2fc15d9a95e6fe35cd5b877eadc1a62d9bc75af1"
 RUN wget "http://nginx.org/download/${NGINX_PKG}" && \
     echo "${NGINX_SHA} *${NGINX_PKG}" | sha256sum -c - && \
     tar --no-same-owner -xzf ${NGINX_PKG} --one-top-level=nginx --strip-components=1
 
 # Download headers-more module source
-ARG HEADERS_MORE_VERSION="0.40"
+ARG HEADERS_MORE_VERSION="0.41"
 ARG HEADERS_MORE_PKG="v${HEADERS_MORE_VERSION}.tar.gz"
-ARG HEADERS_MORE_SHA="c14cb5e6c998590c209efbf77bd7637ce2cab02332e4192756a8af5b26ba4284"
+ARG HEADERS_MORE_SHA="800eba641c29b89dfd00a97ccac314a2b7768bdd85ea37ed819452494a5633cd"
 RUN wget "https://github.com/openresty/headers-more-nginx-module/archive/${HEADERS_MORE_PKG}" && \
     echo "${HEADERS_MORE_SHA} *${HEADERS_MORE_PKG}" | sha256sum -c - && \
     tar --no-same-owner -xzf ${HEADERS_MORE_PKG} --one-top-level=headers-more --strip-components=1
@@ -37,7 +37,7 @@ RUN cd nginx && \
     make modules
 
 # Production container starts here
-FROM zappi/nginx:1.31.3
+FROM zappi/nginx:1.31.8
 
 USER root