diff --git a/package.json b/package.json
index e2e434888ed..4262dbc6862 100644
--- a/package.json
+++ b/package.json
@@ -185,7 +185,7 @@
       "smol-toml@<1.6.1": "1.6.1",
       "socket.io-parser@>=4.0.0 <4.2.6": "4.2.7",
       "svgo@>=3.0.0 <3.3.3": "3.3.3",
-      "tar@<7.5.11": "7.5.11",
+      "tar@<7.5.11": "7.5.21",
       "tmp@<0.2.6": "0.2.6",
       "undici-types@<7.16.0": "7.24.8",
       "utf-8-validate": "5.0.10"
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 7d547a1b495..814add411be 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -102,7 +102,7 @@ overrides:
   smol-toml@<1.6.1: 1.6.1
   socket.io-parser@>=4.0.0 <4.2.6: 4.2.7
   svgo@>=3.0.0 <3.3.3: 3.3.3
-  tar@<7.5.11: 7.5.11
+  tar@<7.5.11: 7.5.21
   tmp@<0.2.6: 0.2.6
   undici-types@<7.16.0: 7.24.8
   utf-8-validate: 5.0.10
@@ -14171,8 +14171,8 @@ packages:
   tar-stream@3.1.7:
     resolution: {integrity: sha512-qJj60CXt7IU1Ffyc3NJMjh6EkuCFej46zUqJ4J7pqYlThyd9bO0XBTmcOIhSzZJVWfsLks0+nle/j538YAW9RQ==}
 
-  tar@7.5.11:
-    resolution: {integrity: sha512-ChjMH33/KetonMTAtpYdgUFr0tbz69Fp2v7zWxQfYZX4g5ZN2nOBXm1R2xyA+lMIKrLKIoKAwFj93jE/avX9cQ==}
+  tar@7.5.21:
+    resolution: {integrity: sha512-XdhtCvlMywwxpCW8YEq3lOXBJpUPTR2OHHcwLPO3HwsJqOHa2Ok/oJ7ruGzp+JrKoRPVCzJwAdEjqLW/vNRPHA==}
     engines: {node: '>=18'}
 
   term-size@2.2.1:
@@ -17599,7 +17599,7 @@ snapshots:
       source-map-support: 0.5.21
       stacktrace-parser: 0.1.11
       structured-headers: 0.4.1
-      tar: 7.5.11
+      tar: 7.5.21
       terminal-link: 2.1.1
       undici: 6.22.0
       wrap-ansi: 7.0.0
@@ -18281,7 +18281,7 @@ snapshots:
       node-fetch: 2.7.0
       nopt: 8.1.0
       semver: 7.7.4
-      tar: 7.5.11
+      tar: 7.5.21
     transitivePeerDependencies:
       - encoding
       - supports-color
@@ -31194,7 +31194,7 @@ snapshots:
       - bare-abort-controller
       - react-native-b4a
 
-  tar@7.5.11:
+  tar@7.5.21:
     dependencies:
       '@isaacs/fs-minipass': 4.0.1
       chownr: 3.0.0