diff --git a/.env.example b/.env.example
index ba2457f..db4f184 100644
--- a/.env.example
+++ b/.env.example
@@ -195,7 +195,7 @@
 # DFE_OAUTH2_PROXY_COOKIE_SECURE=false
 ## Per-surface override of DFE_EXTERNAL_ORIGIN, which it follows when unset.
 # DFE_OAUTH2_PROXY_EXTERNAL_ORIGIN=
-# DFE_OAUTH2_PROXY_VERSION=v7.15.4@sha256:b1b2021fe8f4004573e8d690dec6c7bb29cc44364572cf8510a05bf3a0ae2ded
+# DFE_OAUTH2_PROXY_VERSION=v7.15.5@sha256:8498b0d0ef0a7b29686414000a08aee467f02d0299c9ed1e006a8f33fc017916
 
 
 ## ============================================================================
diff --git a/docker-compose.yml b/docker-compose.yml
index 2ca160a..b6f6b46 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -1666,7 +1666,7 @@ services:
   # ===========================================================================
 
   oauth2-proxy-kafbat:
-    image: quay.io/oauth2-proxy/oauth2-proxy:${DFE_OAUTH2_PROXY_VERSION:-v7.15.4@sha256:b1b2021fe8f4004573e8d690dec6c7bb29cc44364572cf8510a05bf3a0ae2ded}
+    image: quay.io/oauth2-proxy/oauth2-proxy:${DFE_OAUTH2_PROXY_VERSION:-v7.15.5@sha256:8498b0d0ef0a7b29686414000a08aee467f02d0299c9ed1e006a8f33fc017916}
     container_name: ${DFE_CONTAINER_PREFIX:-}dfe-oauth2-proxy-kafbat
     profiles: ["auth"]
     restart: unless-stopped
@@ -1683,7 +1683,7 @@ services:
         required: false
 
   oauth2-proxy-hyperdx:
-    image: quay.io/oauth2-proxy/oauth2-proxy:${DFE_OAUTH2_PROXY_VERSION:-v7.15.4@sha256:b1b2021fe8f4004573e8d690dec6c7bb29cc44364572cf8510a05bf3a0ae2ded}
+    image: quay.io/oauth2-proxy/oauth2-proxy:${DFE_OAUTH2_PROXY_VERSION:-v7.15.5@sha256:8498b0d0ef0a7b29686414000a08aee467f02d0299c9ed1e006a8f33fc017916}
     container_name: ${DFE_CONTAINER_PREFIX:-}dfe-oauth2-proxy-hyperdx
     profiles: ["auth"]
     restart: unless-stopped
@@ -1710,7 +1710,7 @@ services:
   # and name as the app proxy above, and cookies are not port-scoped, so signing
   # in at the app authorises this one too.
   oauth2-proxy-hyperdx-api:
-    image: quay.io/oauth2-proxy/oauth2-proxy:${DFE_OAUTH2_PROXY_VERSION:-v7.15.4@sha256:b1b2021fe8f4004573e8d690dec6c7bb29cc44364572cf8510a05bf3a0ae2ded}
+    image: quay.io/oauth2-proxy/oauth2-proxy:${DFE_OAUTH2_PROXY_VERSION:-v7.15.5@sha256:8498b0d0ef0a7b29686414000a08aee467f02d0299c9ed1e006a8f33fc017916}
     container_name: ${DFE_CONTAINER_PREFIX:-}dfe-oauth2-proxy-hyperdx-api
     profiles: ["auth"]
     restart: unless-stopped