diff --git a/.gitignore b/.gitignore
index 08911b0..5023da7 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1 +1 @@
-SOURCES/nodemon-v2.0.19-bundled.tar.gz
+SOURCES/nodemon-v2.0.20-bundled.tar.gz
diff --git a/.nodejs-nodemon.metadata b/.nodejs-nodemon.metadata
index a9b2e4a..b87d3ae 100644
--- a/.nodejs-nodemon.metadata
+++ b/.nodejs-nodemon.metadata
@@ -1 +1 @@
-42c5643620d4acafa81da9e3d5e99a95020a9e1c SOURCES/nodemon-v2.0.19-bundled.tar.gz
+f558d7dc37c745ca2983daebe6868df6ee46c00a SOURCES/nodemon-v2.0.20-bundled.tar.gz
diff --git a/SPECS/nodejs-nodemon.spec b/SPECS/nodejs-nodemon.spec
index 3787427..bbacded 100644
--- a/SPECS/nodejs-nodemon.spec
+++ b/SPECS/nodejs-nodemon.spec
@@ -5,7 +5,7 @@
 %global enable_tests 0
 
 Name:          nodejs-%{npm_name}
-Version:       2.0.19
+Version:       2.0.20
 Release:       2%{?dist}
 Summary:       Simple monitor script for use during development of a node.js app
 License:       MIT
@@ -73,15 +73,23 @@ npm run test
 %{_bindir}/nodemon
 
 %changelog
+* Mon Dec 12 2022 Jan Staněk <jstanek@redhat.com> - 2.0.20-2
+- Record remaining CVEs fixed by current rebase
+  Resolves: CVE-2021-44906
+
+* Wed Nov 09 2022 Jan Staněk <jstanek@redhat.com> - 2.0.20-1
+- Rebase to 2.0.20
+  Resolves: CVE-2022-3517
+
 * Wed Aug 03 2022 Zuzana Svetlikova <zsvetlik@redhat.com> - 2.0.19-2
 - Switched from autosetup
 - Removed CODE_OF_CONDUCT.md and faq.md which is not present in npmjs package, might switch to GH sources in the future
-- Resolves: RHBZ#2109919
+- Resolves: RHBZ#2108140
 
 * Mon Jul 25 2022 Zuzana Svetlikova <zsvetlik@redhat.com> - 2.0.19-1
 - Rebase to 2.0.19
 - Resolves CVE-2022-33987
-- Resolves: RHBZ#2109919
+- Resolves: RHBZ#2108140
 
 * Tue Nov 30 2021 Zuzana Svetlikova <zsvetlik@redhat.com> - 2.0.15-1
 - Resolves: RHBZ#1991322, RHBZ#1948030