# Node.js 20.12.2 (LTS)

DevFeed: [Node.js 20.12.2 (LTS)](<https://devfeed.tech/articles/node-js-20-12-2-lts-2709.md>)

Original publisher: [Read original article](<https://nodejs.org/en/blog/release/v20.12.2>)

Published: 2024-04-10T16:38:15Z

Content type: release

Language: en

Sources: [Node.js Blog](<https://devfeed.tech/sources/node-js-blog.md>)

Topics: [Node.js](<https://devfeed.tech/topics/node-js.md>), [Security](<https://devfeed.tech/topics/security.md>), [JavaScript](<https://devfeed.tech/topics/javascript.md>), [cross-platform](<https://devfeed.tech/topics/cross-platform.md>), [Windows](<https://devfeed.tech/topics/windows.md>)

Tags: [command-line](<https://devfeed.tech/tags/command-line.md>), [cross-platform](<https://devfeed.tech/tags/cross-platform.md>), [javascript](<https://devfeed.tech/tags/javascript.md>), [lts](<https://devfeed.tech/tags/lts.md>), [node-js](<https://devfeed.tech/tags/node-js.md>), [open-source](<https://devfeed.tech/tags/open-source.md>), [release](<https://devfeed.tech/tags/release.md>), [security](<https://devfeed.tech/tags/security.md>)

## AI overview

Node.js 20.12.2 is an LTS security release addressing CVE-2024-27980, a Windows command-injection vulnerability involving the args parameter when the shell option is enabled. The release also disallows direct spawning of .bat and .cmd files on Windows and provides updated binaries, installers, and source code for multiple platforms.

## Source excerpt

Node.js® is a free, open-source, cross-platform JavaScript runtime environment that lets developers create servers, web apps, command line tools and scripts.