There is an updated pull request by k4leg against master on the void-packages repository https://github.com/k4leg/void-packages nodejs https://github.com/void-linux/void-packages/pull/17592 nodejs*: update Do I need to rebuild packages that depend on `nodejs*` or `nodejs*-devel`? (https://nodejs.org/en/blog/vulnerability/december-2019-security-releases/) A patch file from https://github.com/void-linux/void-packages/pull/17592.patch is attached