diff --git a/package-lock.json b/package-lock.json
index 476e0ab8f..86a017b2b 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -60,7 +60,7 @@
         "node-cron": "^3.0.3",
         "sqlite3": "^6.0.1",
         "stream-concat": "^1.0.0",
-        "tar": "^7.5.11",
+        "tar": "^7.5.16",
         "uint8arrays": "^4.0.6",
         "unique-names-generator": "^4.7.1",
         "url-join": "^5.0.0",
@@ -18580,9 +18580,9 @@
       }
     },
     "node_modules/tar": {
-      "version": "7.5.11",
-      "resolved": "https://registry.npmjs.org/tar/-/tar-7.5.11.tgz",
-      "integrity": "sha512-ChjMH33/KetonMTAtpYdgUFr0tbz69Fp2v7zWxQfYZX4g5ZN2nOBXm1R2xyA+lMIKrLKIoKAwFj93jE/avX9cQ==",
+      "version": "7.5.16",
+      "resolved": "https://registry.npmjs.org/tar/-/tar-7.5.16.tgz",
+      "integrity": "sha512-56adEpPMouktRlBLXiaYFFzZ/3+JXa8P9n7WbR+ibIjtviN55mEaOkiysCnPnWm+7kkui1Dn8J9l+g6zV8731w==",
       "license": "BlueOak-1.0.0",
       "dependencies": {
         "@isaacs/fs-minipass": "^4.0.0",
diff --git a/package.json b/package.json
index 0a85c3f32..23a770317 100644
--- a/package.json
+++ b/package.json
@@ -98,7 +98,7 @@
     "node-cron": "^3.0.3",
     "sqlite3": "^6.0.1",
     "stream-concat": "^1.0.0",
-    "tar": "^7.5.11",
+    "tar": "^7.5.16",
     "uint8arrays": "^4.0.6",
     "unique-names-generator": "^4.7.1",
     "url-join": "^5.0.0",