diff --git a/.gitignore b/.gitignore
index 6fe20ae..900620e 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,6 +1,6 @@
-SOURCES/cjs-module-lexer-1.2.2.tar.gz
+SOURCES/cjs-module-lexer-1.4.1.tar.gz
 SOURCES/icu4c-75_1-src.tgz
-SOURCES/node-v20.17.0-stripped.tar.gz
-SOURCES/undici-6.19.2.tar.gz
-SOURCES/wasi-sdk-11.0-linux.tar.gz
-SOURCES/wasi-sdk-16.0-linux.tar.gz
+SOURCES/node-v20.18.2-stripped.tar.gz
+SOURCES/undici-6.21.1.tar.gz
+SOURCES/wasi-sdk-12.tar.gz
+SOURCES/wasi-sdk-20.tar.gz
diff --git a/.nodejs.metadata b/.nodejs.metadata
index 8dffa95..be05bee 100644
--- a/.nodejs.metadata
+++ b/.nodejs.metadata
@@ -1,6 +1,6 @@
-164f7f39841415284b0280a648c43bd7ea1615ac SOURCES/cjs-module-lexer-1.2.2.tar.gz
+bea4d977983331b0e1a981762f83e17d1de824cd SOURCES/cjs-module-lexer-1.4.1.tar.gz
 da3614aa496c5f0fde12f7aa155f235b5e239f1b SOURCES/icu4c-75_1-src.tgz
-bb593ff803ffa80535fe65e97cc188c0ba7284f3 SOURCES/node-v20.17.0-stripped.tar.gz
-0653ac16ef498878fffefea0fa1f7e870cdfc249 SOURCES/undici-6.19.2.tar.gz
-ff114dd45b4efeeae7afe4621bfc6f886a475b4b SOURCES/wasi-sdk-11.0-linux.tar.gz
-fbe01909bf0e8260fcc3696ec37c9f731b5e356a SOURCES/wasi-sdk-16.0-linux.tar.gz
+5a70c55c407b1e281a894d93cfbbd9abde68ba3b SOURCES/node-v20.18.2-stripped.tar.gz
+c7b056dc6fb73d0d15d69085dfa951df91d290f3 SOURCES/undici-6.21.1.tar.gz
+5ea3a1deb65a52a36ceb41324da690f54b2a4805 SOURCES/wasi-sdk-12.tar.gz
+da40abcb73a6dddafced6174d24ed49e414cda3c SOURCES/wasi-sdk-20.tar.gz
diff --git a/SPECS/nodejs.spec b/SPECS/nodejs.spec
index 996e544..d5adb09 100644
--- a/SPECS/nodejs.spec
+++ b/SPECS/nodejs.spec
@@ -43,8 +43,8 @@
 # than a Fedora release lifecycle.
 %global nodejs_epoch 1
 %global nodejs_major 20
-%global nodejs_minor 17
-%global nodejs_patch 0
+%global nodejs_minor 18
+%global nodejs_patch 2
 %global nodejs_abi %{nodejs_major}.%{nodejs_minor}
 # nodejs_soversion - from NODE_MODULE_VERSION in src/node_version.h
 %global nodejs_soversion 115
@@ -68,7 +68,7 @@
 
 # c-ares - from deps/cares/include/ares_version.h
 # https://github.com/nodejs/node/pull/9332
-%global c_ares_version 1.32.3
+%global c_ares_version 1.33.1
 
 # llhttp - from deps/llhttp/include/llhttp.h
 %global llhttp_version 8.1.2
@@ -105,7 +105,7 @@
 %endif
 
 # simduft from deps/simdutf/simdutf.h
-%global simduft_version 5.3.0
+%global simduft_version 5.5.0
 
 # ada from deps/ada/ada.h
 %global ada_version 2.9.0
@@ -131,7 +131,7 @@
 
 # Node.js 16.9.1 and later comes with an experimental package management tool
 # corepack - from deps/corepack/package.json
-%global corepack_version 0.28.1
+%global corepack_version 0.29.4
 
 # uvwasi - from deps/uvwasi/include/uvwasi.h
 %global uvwasi_version 0.0.21
@@ -172,19 +172,19 @@ Source8: npmrc.builtin.in
 # Recipes for creating these blobs are included in the sources.
 
 # Version: jq '.version' deps/cjs-module-lexer/package.json
-# Original: https://github.com/nodejs/cjs-module-lexer/archive/refs/tags/1.2.2.tar.gz
-# Adjustments: rm -f cjs-module-lexer-1.2.2/lib/lexer.wasm
+# Original: https://github.com/nodejs/cjs-module-lexer/archive/refs/tags/1.4.1.tar.gz
+# Adjustments: rm -f cjs-module-lexer-1.4.1/lib/lexer.wasm
 # wasi-sdk version can be found in Makefile
-# https://github.com/nodejs/cjs-module-lexer/blob/1.2.2/Makefile
-Source101: cjs-module-lexer-1.2.2.tar.gz
-Source111: https://github.com/WebAssembly/wasi-sdk/archive/wasi-sdk-11/wasi-sdk-11.0-linux.tar.gz
+# https://github.com/nodejs/cjs-module-lexer/blob/1.4.1/Makefile
+Source101: cjs-module-lexer-1.4.1.tar.gz
+Source111: https://github.com/WebAssembly/wasi-sdk/archive/refs/tags/wasi-sdk-12.tar.gz
 
 # Version: jq '.version' deps/undici/src/package.json
-# Original: https://github.com/nodejs/undici/archive/refs/tags/v6.13.0.tar.gz
-# Adjustments: rm -f undici-6.13.0/lib/llhttp/llhttp*.wasm
+# Original: https://github.com/nodejs/undici/archive/v6.21.1/undici-v6.21.1.tar.gz
+# Adjustments: rm -f undici-v6.21.0/lib/llhttp/llhttp*.wasm
 # wasi-sdk version can be found in lib/llhttp/wasm_build_env.txt
-Source102: undici-6.19.2.tar.gz
-Source112: https://github.com/WebAssembly/wasi-sdk/archive/wasi-sdk-16/wasi-sdk-16.0-linux.tar.gz
+Source102: undici-6.21.1.tar.gz
+Source112: https://github.com/WebAssembly/wasi-sdk/archive/refs/tags/wasi-sdk-20.tar.gz
 
 # Disable running gyp on bundled deps we don't use
 Patch1: 0001-Disable-running-gyp-on-shared-deps.patch
@@ -634,6 +634,15 @@ NODE_PATH=%{buildroot}%{_prefix}/lib/node_modules:%{buildroot}%{_prefix}/lib/nod
 
 
 %changelog
+* Wed Jan 29 2025 Andrei Radchenko <aradchen@redhat.com>
+- Update to version 20.18.2
+  Fixes: CVE-2025-23083 CVE-2025-23085 CVE-2025-22150
+  Resolves: RHEL-76536 RHEL-76364
+
+* Mon Sep 23 2024 Jan Staněk <jstanek@redhat.com> - 1:20.17.0-1
+- Update to 20.17.0
+  Resolves: RHEL-58721
+
 * Mon Aug 05 2024 Honza Horak <hhorak@redhat.com> - 1:20.16.0-1
 - Update to 20.16.0
   Fixes: CVE-2024-36137 CVE-2024-22018 CVE-2024-22020