diff --git a/README.md b/README.md
index 1660c31..e038c34 100644
--- a/README.md
+++ b/README.md
@@ -47,10 +47,10 @@ Examples:
 
 ## OS Variants
 
-* nginx – *latest stable ModSecurity v3 on Nginx 1.28.0 official stable base image, and latest stable OWASP CRS 4.19.0*
+* nginx – *latest stable ModSecurity v3 on Nginx 1.28.0 official stable base image, and latest stable OWASP CRS 4.20.0*
    * [nginx](https://github.com/coreruleset/modsecurity-crs-docker/blob/master/nginx/Dockerfile)
    * [nginx-alpine](https://github.com/coreruleset/modsecurity-crs-docker/blob/master/nginx/Dockerfile-alpine)
-* Apache httpd – *last stable ModSecurity v2 on Apache 2.4.65 official stable base image, and latest stable OWASP CRS 4.19.0*
+* Apache httpd – *last stable ModSecurity v2 on Apache 2.4.65 official stable base image, and latest stable OWASP CRS 4.20.0*
    * [apache](https://github.com/coreruleset/modsecurity-crs-docker/blob/master/apache/Dockerfile)
    * [apache-alpine](https://github.com/coreruleset/modsecurity-crs-docker/blob/master/apache/Dockerfile-alpine)
 
diff --git a/docker-bake.hcl b/docker-bake.hcl
index 2d49fb4..eaf2630 100644
--- a/docker-bake.hcl
+++ b/docker-bake.hcl
@@ -23,7 +23,7 @@ variable "previous-major-crs-version" {
 
 variable "major-crs-version" {
     # renovate: depName=coreruleset/coreruleset datasource=github-releases
-    default = "4.19.0"
+    default = "4.20.0"
 }
 
 variable "crs-versions" {