diff --git a/core/installer/values-tmpl/cert-manager.cue b/core/installer/values-tmpl/cert-manager.cue
index c7c3878..4d1cddd 100644
--- a/core/installer/values-tmpl/cert-manager.cue
+++ b/core/installer/values-tmpl/cert-manager.cue
@@ -9,21 +9,21 @@
 			registry:   "quay.io"
 			repository: "jetstack"
 			name:       "cert-manager-controller"
-			tag:        "v1.12.2"
+			tag:        "v1.12.17"
 			pullPolicy: "IfNotPresent"
 		}
 		cainjector: {
 			registry:   "quay.io"
 			repository: "jetstack"
 			name:       "cert-manager-cainjector"
-			tag:        "v1.12.2"
+			tag:        "v1.12.17"
 			pullPolicy: "IfNotPresent"
 		}
 		webhook: {
 			registry:   "quay.io"
 			repository: "jetstack"
 			name:       "cert-manager-webhook"
-			tag:        "v1.12.2"
+			tag:        "v1.12.17"
 			pullPolicy: "IfNotPresent"
 		}
 		dnsChallengeSolver: {