diff --git a/package-lock.json b/package-lock.json
index 9b473de12..1c2ca111c 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -60,7 +60,7 @@
         "node-cron": "^3.0.3",
         "sqlite3": "^6.0.1",
         "stream-concat": "^1.0.0",
-        "tar": "^7.5.16",
+        "tar": "^7.5.22",
         "uint8arrays": "^4.0.6",
         "unique-names-generator": "^4.7.1",
         "url-join": "^5.0.0",
@@ -18593,9 +18593,9 @@
       }
     },
     "node_modules/tar": {
-      "version": "7.5.16",
-      "resolved": "https://registry.npmjs.org/tar/-/tar-7.5.16.tgz",
-      "integrity": "sha512-56adEpPMouktRlBLXiaYFFzZ/3+JXa8P9n7WbR+ibIjtviN55mEaOkiysCnPnWm+7kkui1Dn8J9l+g6zV8731w==",
+      "version": "7.5.22",
+      "resolved": "https://registry.npmjs.org/tar/-/tar-7.5.22.tgz",
+      "integrity": "sha512-MFO/QzvtAOmJbkhOaCTvbGcFN9L9b+JunIsDwaKljSOdcLMea3NJ1k9Usz/rjdfSXTq4dfzfeS7W4p4YOAAHeA==",
       "license": "BlueOak-1.0.0",
       "dependencies": {
         "@isaacs/fs-minipass": "^4.0.0",
diff --git a/package.json b/package.json
index e191bf0d0..d6bce9ca7 100644
--- a/package.json
+++ b/package.json
@@ -98,7 +98,7 @@
     "node-cron": "^3.0.3",
     "sqlite3": "^6.0.1",
     "stream-concat": "^1.0.0",
-    "tar": "^7.5.16",
+    "tar": "^7.5.22",
     "uint8arrays": "^4.0.6",
     "unique-names-generator": "^4.7.1",
     "url-join": "^5.0.0",