diff --git a/compose.override.yml b/compose.override.yml
index 1fa618b..bbfcdcc 100644
--- a/compose.override.yml
+++ b/compose.override.yml
@@ -58,7 +58,7 @@ services:
   # Dev mail catcher — Kratos recovery/verification emails land here (web UI on 8025).
   # kratos.yml points the courier at smtp://mailpit:1025; prod uses a real SMTP via env.
   mailpit:
-    image: axllent/mailpit:v1.33.0
+    image: axllent/mailpit:v1.33.1
     ports:
       - "8025:8025"
     restart: unless-stopped
diff --git a/e2e-tests/compose.full.yml b/e2e-tests/compose.full.yml
index de71fb0..e71074e 100644
--- a/e2e-tests/compose.full.yml
+++ b/e2e-tests/compose.full.yml
@@ -81,7 +81,7 @@ services:
 
   # Catches the courier's mail (kratos.yml → smtp://mailpit:1025), so a test can read an emailed code.
   mailpit:
-    image: axllent/mailpit:v1.33.0
+    image: axllent/mailpit:v1.33.1
     mem_limit: 128m
     memswap_limit: 128m
     healthcheck:
diff --git a/release-tooling/dockerhub-overview.md.tmpl b/release-tooling/dockerhub-overview.md.tmpl
index c2034bf..b58484d 100644
--- a/release-tooling/dockerhub-overview.md.tmpl
+++ b/release-tooling/dockerhub-overview.md.tmpl
@@ -131,7 +131,7 @@ services:
 
   # Catches Kratos' recovery/verification emails — UI on http://localhost:8025
   mailpit:
-    image: axllent/mailpit:v1.33.0
+    image: axllent/mailpit:v1.33.1
     ports:
       - "8025:8025"
     restart: unless-stopped