diff --git a/package.json b/package.json
index f2778bc20..2ca780c15 100644
--- a/package.json
+++ b/package.json
@@ -34,7 +34,7 @@
     "proxy-from-env": "^1.1.0",
     "semver": "^7.6.3",
     "supports-color": "^10.0.0",
-    "tar": "^7.5.4",
+    "tar": "^7.5.8",
     "tsx": "^4.16.2",
     "typescript": "^5.7.3",
     "undici": "^6.21.2",
diff --git a/yarn.lock b/yarn.lock
index a2f193d1e..6f1177a54 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -1402,7 +1402,7 @@ __metadata:
     proxy-from-env: "npm:^1.1.0"
     semver: "npm:^7.6.3"
     supports-color: "npm:^10.0.0"
-    tar: "npm:^7.5.4"
+    tar: "npm:^7.5.8"
     tsx: "npm:^4.16.2"
     typescript: "npm:^5.7.3"
     undici: "npm:^6.21.2"
@@ -4172,7 +4172,7 @@ __metadata:
   languageName: node
   linkType: hard
 
-"tar@npm:^7.5.2, tar@npm:^7.5.4":
+"tar@npm:^7.5.2":
   version: 7.5.6
   resolution: "tar@npm:7.5.6"
   dependencies:
@@ -4185,6 +4185,19 @@ __metadata:
   languageName: node
   linkType: hard
 
+"tar@npm:^7.5.8":
+  version: 7.5.9
+  resolution: "tar@npm:7.5.9"
+  dependencies:
+    "@isaacs/fs-minipass": "npm:^4.0.0"
+    chownr: "npm:^3.0.0"
+    minipass: "npm:^7.1.2"
+    minizlib: "npm:^3.1.0"
+    yallist: "npm:^5.0.0"
+  checksum: 10c0/e870beb1b2477135ca2abe86b2d18f7b35d0a4e3a37bbc523d3b8f7adca268dfab543f26528a431d569897f8c53a7cac745cdfbc4411c2f89aeeacc652b81b0a
+  languageName: node
+  linkType: hard
+
 "tinybench@npm:^2.9.0":
   version: 2.9.0
   resolution: "tinybench@npm:2.9.0"