diff --git a/pkgs/development/web/nodejs/v16.nix b/pkgs/development/web/nodejs/v16.nix
index 71e853cfb05d3..8b480d4440e83 100644
--- a/pkgs/development/web/nodejs/v16.nix
+++ b/pkgs/development/web/nodejs/v16.nix
@@ -10,6 +10,9 @@ let
 in
   buildNodejs {
     inherit enableNpm;
+    # If you do upgrade here, please update in pkgs/top-level/release.nix
+    # the permitted insecure version to ensure it gets cached for our users
+    # and backport this to stable release (23.05).
     version = "16.20.1";
     sha256 = "sha256-g+AzgeJx8aVhkYjnrqnYXZt+EvW+KijOt41ySe0it/E=";
     patches = [
diff --git a/pkgs/top-level/release.nix b/pkgs/top-level/release.nix
index 6d1070dfa5efa..8f470925fac47 100644
--- a/pkgs/top-level/release.nix
+++ b/pkgs/top-level/release.nix
@@ -25,7 +25,7 @@
       # and it will be too much painful for our users to recompile them
       # for no real reason.
       # Remove them for 23.11.
-      "nodejs-16.20.0"
+      "nodejs-16.20.1"
       "openssl-1.1.1u"
     ];
   }; }