diff --git a/package.json b/package.json
index f2778bc20..54a1e5a43 100644
--- a/package.json
+++ b/package.json
@@ -34,7 +34,7 @@
     "proxy-from-env": "^1.1.0",
     "semver": "^7.6.3",
     "supports-color": "^10.0.0",
-    "tar": "^7.5.4",
+    "tar": "^7.5.11",
     "tsx": "^4.16.2",
     "typescript": "^5.7.3",
     "undici": "^6.21.2",
diff --git a/yarn.lock b/yarn.lock
index eca7912d4..e7f9c664c 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -1402,7 +1402,7 @@ __metadata:
     proxy-from-env: "npm:^1.1.0"
     semver: "npm:^7.6.3"
     supports-color: "npm:^10.0.0"
-    tar: "npm:^7.5.4"
+    tar: "npm:^7.5.11"
     tsx: "npm:^4.16.2"
     typescript: "npm:^5.7.3"
     undici: "npm:^6.21.2"
@@ -4172,16 +4172,16 @@ __metadata:
   languageName: node
   linkType: hard
 
-"tar@npm:^7.5.2, tar@npm:^7.5.4":
-  version: 7.5.6
-  resolution: "tar@npm:7.5.6"
+"tar@npm:^7.5.11, tar@npm:^7.5.2":
+  version: 7.5.13
+  resolution: "tar@npm:7.5.13"
   dependencies:
     "@isaacs/fs-minipass": "npm:^4.0.0"
     chownr: "npm:^3.0.0"
     minipass: "npm:^7.1.2"
     minizlib: "npm:^3.1.0"
     yallist: "npm:^5.0.0"
-  checksum: 10c0/08af3807035957650ad5f2a300c49ca4fe0566ac0ea5a23741a5b5103c6da42891a9eeaed39bc1fbcf21c5cac4dc846828a004727fb08b9d946322d3144d1fd2
+  checksum: 10c0/5c65b8084799bde7a791593a1c1a45d3d6ee98182e3700b24c247b7b8f8654df4191642abbdb07ff25043d45dcff35620827c3997b88ae6c12040f64bed5076b
   languageName: node
   linkType: hard