diff --git a/package.json b/package.json
index c1424cfc..5d2a43b7 100644
--- a/package.json
+++ b/package.json
@@ -53,7 +53,7 @@
     "mocha": "11.7.5",
     "rimraf": "6.1.2",
     "stream-bench": "0.1.2",
-    "tar": "7.5.16",
+    "tar": "7.5.21",
     "typescript": "5.9.3",
     "yauzl": "3.2.1"
   },
diff --git a/yarn.lock b/yarn.lock
index 3b85bd85..3fa827d7 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -153,7 +153,7 @@ __metadata:
     readdir-glob: "npm:2.0.1"
     rimraf: "npm:6.1.2"
     stream-bench: "npm:0.1.2"
-    tar: "npm:7.5.16"
+    tar: "npm:7.5.21"
     tar-stream: "npm:3.1.7"
     typescript: "npm:5.9.3"
     yauzl: "npm:3.2.1"
@@ -1399,16 +1399,16 @@ __metadata:
   languageName: node
   linkType: hard
 
-"tar@npm:7.5.16":
-  version: 7.5.16
-  resolution: "tar@npm:7.5.16"
+"tar@npm:7.5.21":
+  version: 7.5.21
+  resolution: "tar@npm:7.5.21"
   dependencies:
     "@isaacs/fs-minipass": "npm:^4.0.0"
     chownr: "npm:^3.0.0"
     minipass: "npm:^7.1.2"
     minizlib: "npm:^3.1.0"
     yallist: "npm:^5.0.0"
-  checksum: 10c0/4f37f3c4bd2ca2755fd736a5df1d573c1a868ec1b1e893346aeafa95ac510f9e2fd1469420bd866cc7904799e5bd4ac62b5d4f03fe27747d6e1e373b44505c5c
+  checksum: 10c0/bce0e51692356078e6f6a909d5c93f5b4c099c097ffea19b1b1bf10385539a429baba26bca59aabbace68c4519d16f2f1c07afe7eaab55876a449a032480fabc
   languageName: node
   linkType: hard