diff --git a/package.json b/package.json
index 674d5823f36ab..1bd768226e7c3 100644
--- a/package.json
+++ b/package.json
@@ -111,7 +111,7 @@
     "spdx-expression-parse": "^4.0.0",
     "ssri": "^13.0.0",
     "supports-color": "^10.2.2",
-    "tar": "^7.5.2",
+    "tar": "^7.5.4",
     "text-table": "~0.2.0",
     "tiny-relative-date": "^2.0.2",
     "treeverse": "^3.0.0",