diff --git a/.gitignore b/.gitignore
index b1f370e..5023da7 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1 +1 @@
-SOURCES/nodemon-v2.0.15-bundled.tar.gz
+SOURCES/nodemon-v2.0.20-bundled.tar.gz
diff --git a/.nodejs-nodemon.metadata b/.nodejs-nodemon.metadata
index 8acf592..9abb697 100644
--- a/.nodejs-nodemon.metadata
+++ b/.nodejs-nodemon.metadata
@@ -1 +1 @@
-0c0d18598b43f7768e1531429a0d63014d322f50 SOURCES/nodemon-v2.0.15-bundled.tar.gz
+1be1ce910230ecac54d90ff85e3fcf1f3fe87e4d SOURCES/nodemon-v2.0.20-bundled.tar.gz
diff --git a/SPECS/nodejs-nodemon.spec b/SPECS/nodejs-nodemon.spec
index 5b0b3dc..a7ef5bb 100644
--- a/SPECS/nodejs-nodemon.spec
+++ b/SPECS/nodejs-nodemon.spec
@@ -5,7 +5,7 @@
 %global enable_tests 0
 
 Name:          nodejs-%{npm_name}
-Version:       2.0.15
+Version:       2.0.20
 Release:       1%{?dist}
 Summary:       Simple monitor script for use during development of a node.js app
 License:       MIT
@@ -73,6 +73,10 @@ npm run test
 %{_bindir}/nodemon
 
 %changelog
+* Wed Nov 09 2022 Jan Staněk <jstanek@redhat.com> - 2.0.20-1
+- Rebase to 2.0.20
+  Resolves: CVE-2022-3517
+
 * Tue Nov 30 2021 Zuzana Svetlikova <zsvetlik@redhat.com> - 2.0.15-1
 - Resolves: RHBZ#2005419
 - Resolves CVE-2020-28469