---
date: '2024-04-10T16:38:15.626Z'
category: release
title: Node.js 20.12.2 (LTS)
layout: blog-post
author: Rafael Gonzaga
---

## 2024-04-10, Version 20.12.2 'Iron' (LTS), @RafaelGSS

This is a security release.

### Notable Changes

- CVE-2024-27980 - Command injection via args parameter of `child_process.spawn` without shell option enabled on Windows

### Commits

- \[[`69ffc6d50d`](https://github.com/nodejs/node/commit/69ffc6d50d)] - **src**: disallow direct .bat and .cmd file spawning (Ben Noordhuis) [nodejs-private/node-private#563](https://github.com/nodejs-private/node-private/pull/563)

Windows 32-bit Installer: https://nodejs.org/dist/v20.12.2/node-v20.12.2-x86.msi \
Windows 64-bit Installer: https://nodejs.org/dist/v20.12.2/node-v20.12.2-x64.msi \
Windows ARM 64-bit Installer: https://nodejs.org/dist/v20.12.2/node-v20.12.2-arm64.msi \
Windows 32-bit Binary: https://nodejs.org/dist/v20.12.2/win-x86/node.exe \
Windows 64-bit Binary: https://nodejs.org/dist/v20.12.2/win-x64/node.exe \
Windows ARM 64-bit Binary: https://nodejs.org/dist/v20.12.2/win-arm64/node.exe \
macOS 64-bit Installer: https://nodejs.org/dist/v20.12.2/node-v20.12.2.pkg \
macOS Apple Silicon 64-bit Binary: https://nodejs.org/dist/v20.12.2/node-v20.12.2-darwin-arm64.tar.gz \
macOS Intel 64-bit Binary: https://nodejs.org/dist/v20.12.2/node-v20.12.2-darwin-x64.tar.gz \
Linux 64-bit Binary: https://nodejs.org/dist/v20.12.2/node-v20.12.2-linux-x64.tar.xz \
Linux PPC LE 64-bit Binary: https://nodejs.org/dist/v20.12.2/node-v20.12.2-linux-ppc64le.tar.xz \
Linux s390x 64-bit Binary: https://nodejs.org/dist/v20.12.2/node-v20.12.2-linux-s390x.tar.xz \
AIX 64-bit Binary: https://nodejs.org/dist/v20.12.2/node-v20.12.2-aix-ppc64.tar.gz \
ARMv7 32-bit Binary: https://nodejs.org/dist/v20.12.2/node-v20.12.2-linux-armv7l.tar.xz \
ARMv8 64-bit Binary: https://nodejs.org/dist/v20.12.2/node-v20.12.2-linux-arm64.tar.xz \
Source Code: https://nodejs.org/dist/v20.12.2/node-v20.12.2.tar.gz \
Other release files: https://nodejs.org/dist/v20.12.2/ \
Documentation: https://nodejs.org/docs/v20.12.2/api/

### SHASUMS

```
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

b1e8241fb06f3f27a3336b4beb193f1cb92f05f1aaaa904e5c62df1cd4f599f5  node-v20.12.2-aix-ppc64.tar.gz
2d05b1cc83d3ecfd52624b3d2a99909f1219510ce63cc0967f8c9bfa9284044f  node-v20.12.2-arm64.msi
98eb624b52efec2530079e1d11296ec0ac20771b94b087d21649250339cf5332  node-v20.12.2-darwin-arm64.tar.gz
37a0cf0d1ea5067040586b34c76d4e2b78bd2246c51106218489e60008475209  node-v20.12.2-darwin-arm64.tar.xz
cd5e9a80a38ccffc036a87b232a5402339c7bf8fa9a494ae0731a1a671687718  node-v20.12.2-darwin-x64.tar.gz
226c2d475091da92892c46e40d058668cf236eb298c1769a3b27151352932b42  node-v20.12.2-darwin-x64.tar.xz
e41474f0db0c63f55e8137fd3836ccb9d9bbcffefaac88a51e0cd61494b503ac  node-v20.12.2-headers.tar.gz
643992acac9f0a80b184d5c4a6144abea7822fbbdac5b97365136e4e6df29eeb  node-v20.12.2-headers.tar.xz
2dc8ffa0da135bf493f881d2d38aac610772c801bb7b6208fcc5de9350f119f7  node-v20.12.2-linux-arm64.tar.gz
b5fc7983fb9506b8c3de53dfa85ff63f9f49cedc94984e29e4c89328536ba4b9  node-v20.12.2-linux-arm64.tar.xz
5861b891815ae8d42835db52bc57191858f348e0521b162c670c8ed4df417f1c  node-v20.12.2-linux-armv7l.tar.gz
b470878c1a0d656805e6d1b9d97883f5cd25b895d573ccee9779950a56198733  node-v20.12.2-linux-armv7l.tar.xz
c33968d78e06af64bd8d89a74781fef71ff126f862f7ed0ff2417d612dd64abb  node-v20.12.2-linux-ppc64le.tar.gz
b48351a23685a85884a2cc69a274b684243a3be18e8fa520105df2c6368cc116  node-v20.12.2-linux-ppc64le.tar.xz
29fe0d5142a3f3d7957d6ccf03cc08cd1c76c41d0460c92dd5800d46caa08d31  node-v20.12.2-linux-s390x.tar.gz
ce7c180ff62d5ad7f40ccc5ccca0d031c9e56edb8795c9be5378359c81c288f8  node-v20.12.2-linux-s390x.tar.xz
f8f9b6877778ed2d5f920a5bd853f0f8a8be1c42f6d448c763a95625cbbb4b0d  node-v20.12.2-linux-x64.tar.gz
595272130310cbe12301430756f23d153f7ab95d00174c02adc11a2e3703d183  node-v20.12.2-linux-x64.tar.xz
ab4b990c2c1d4a55d565813e7a2f71669dc4d1005faa47185d30bde4416975ab  node-v20.12.2-win-arm64.7z
010d488af3adad98e44b2d3f61afb7e3d87b5a620f7a406fe75ab0909b72e7ca  node-v20.12.2-win-arm64.zip
a92f5bb065bbe7b429e573b83604e8e039de3f0dac37e16674de0dea303c5283  node-v20.12.2-win-x64.7z
66dda1717cae30a13be6bb17ad96ee54b69f2c23c85acd9c3299b095fa26b452  node-v20.12.2-win-x64.zip
de8dd5dde38c3e2d5b4269534360414e4ae853496835226b4b1df567e4bf3d3c  node-v20.12.2-win-x86.7z
acf7d7fedf3a50aaa12c4e2bf0aa6220727b22eb24ad1b37264d46e12421d03d  node-v20.12.2-win-x86.zip
20c578361911d7b0cf153b293b025970eca383a2c802e0df438ac254aaca165d  node-v20.12.2-x64.msi
2655083616f0afc6c7a619069506614c4ef32c12bc31b5c455fe1e4815f03d23  node-v20.12.2-x86.msi
bcd2b4289313640639d9822655b80b2aff4689e189da0bf4f5d9c8ac12dec427  node-v20.12.2.pkg
bc57ee721a12cc8be55bb90b4a9a2f598aed5581d5199ec3bd171a4781bfecda  node-v20.12.2.tar.gz
d7cbcc5fbfb31e9001f3f0150bbeda59abe5dd7137aaa6273958cd59ce35ced7  node-v20.12.2.tar.xz
f5e42cbd380a9788bdd86b4316cd1eaaf432777d519b52758ccbe70d1f0f821a  win-arm64/node.exe
e780ac993543d4705ba5bffa79a53854fcb5e77b6845464074ca590dab194539  win-arm64/node.lib
ee59a80e5606dd736bb7610de8eb1a195d12fb9995bf8c1ca7d0950f8827e150  win-arm64/node_pdb.7z
91589548ea260794a8f6a141be6e25cd59b3bb32d8c7dfe84f9998890e3cab3b  win-arm64/node_pdb.zip
d2cfb2cd6cf37c3a654964f01c1333d5692907d20ca172dfb37025114af742e9  win-x64/node.exe
c6e9da74f78f98a465edfb8b51c84c9d33a047a71c4624a854b2af2b4e6a0d50  win-x64/node.lib
1fa139447711a77c4d16791bf0807210e6e08723f1ba257cf9769fe5c7848a48  win-x64/node_pdb.7z
9554b9bfabad3a46cb580d659cb747f1c1a9816fe5e885337ab1490359fe21d6  win-x64/node_pdb.zip
4f65b294b3071a6e73df7f02ab0c360a3fc9661ce897b823c2c48043fbdcaa70  win-x86/node.exe
08399fc4d42a0ce0bad33dd9a9bcc9c845bfb0d5d1393e8c330b5a243411d8a9  win-x86/node.lib
e89ff44159e90f12ba9ee64e8ce4941b6d9216bd69f012e536e670a973e19a61  win-x86/node_pdb.7z
9406e7b1bbde6e4e6043c72f40e39e8e018d5a7397bdffe34fbc00a4d6f2db71  win-x86/node_pdb.zip
-----BEGIN PGP SIGNATURE-----
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=IlUn
-----END PGP SIGNATURE-----
```
