diff --git a/e2e/journeys/css/compose.yml b/e2e/journeys/css/compose.yml
index 9eb4ad01..66c818b7 100644
--- a/e2e/journeys/css/compose.yml
+++ b/e2e/journeys/css/compose.yml
@@ -13,7 +13,7 @@
 # keeps the server on 7.
 services:
   tls:
-    image: caddy:2.11.7@sha256:36c24ad91a7ff7bc4c87fe22bfa8df3c4b18da0773d73fc12ee2c52b98c0bb7e
+    image: caddy:2.11.8@sha256:4fcafa98afd1c2e642e353e3c5cf9ddbe892fcee14bc990e7ba2c5b78e51f9cf
     command: ["caddy", "run", "--config", "/etc/caddy/Caddyfile", "--adapter", "caddyfile"]
     environment: { E2E_PORT: "${E2E_PORT:?}" }
     volumes: ["./Caddyfile:/etc/caddy/Caddyfile:ro"]
diff --git a/e2e/pod/servers/compose.tls.yml b/e2e/pod/servers/compose.tls.yml
index f13ae6f1..8a0cce4e 100644
--- a/e2e/pod/servers/compose.tls.yml
+++ b/e2e/pod/servers/compose.tls.yml
@@ -12,7 +12,7 @@
 # tokens it verifies.
 services:
   tls:
-    image: caddy:2.11.7@sha256:36c24ad91a7ff7bc4c87fe22bfa8df3c4b18da0773d73fc12ee2c52b98c0bb7e
+    image: caddy:2.11.8@sha256:4fcafa98afd1c2e642e353e3c5cf9ddbe892fcee14bc990e7ba2c5b78e51f9cf
     command: ["caddy", "run", "--config", "/etc/caddy/Caddyfile", "--adapter", "caddyfile"]
     environment: { E2E_PORT: "${E2E_PORT:?}" }
     volumes: ["./Caddyfile:/etc/caddy/Caddyfile:ro"]