diff --git a/cli/package.json b/cli/package.json
index 2657697d0ae..3f7e83a65bf 100644
--- a/cli/package.json
+++ b/cli/package.json
@@ -26,7 +26,7 @@
     "pacote": "^21.0.0",
     "proc-log": "^6.0.0",
     "semver": "^7.5.4",
-    "tar": "^7.0.1",
+    "tar": "^7.5.3",
     "yaml": "^2.3.4"
   },
   "devDependencies": {
diff --git a/package-lock.json b/package-lock.json
index 8b33cd4af62..bdb23cba7e0 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -94,7 +94,7 @@
         "pacote": "^21.0.0",
         "proc-log": "^6.0.0",
         "semver": "^7.5.4",
-        "tar": "^7.0.1",
+        "tar": "^7.5.3",
         "yaml": "^2.3.4"
       },
       "devDependencies": {
@@ -41291,9 +41291,9 @@
       }
     },
     "node_modules/tar": {
-      "version": "7.5.2",
-      "resolved": "https://registry.npmjs.org/tar/-/tar-7.5.2.tgz",
-      "integrity": "sha512-7NyxrTE4Anh8km8iEy7o0QYPs+0JKBTj5ZaqHg6B39erLg0qYXN3BijtShwbsNSvQ+LN75+KV+C4QR/f6Gwnpg==",
+      "version": "7.5.3",
+      "resolved": "https://registry.npmjs.org/tar/-/tar-7.5.3.tgz",
+      "integrity": "sha512-ENg5JUHUm2rDD7IvKNFGzyElLXNjachNLp6RaGf4+JOgxXHkqA+gq81ZAMCUmtMtqBsoU62lcp6S27g1LCYGGQ==",
       "license": "BlueOak-1.0.0",
       "dependencies": {
         "@isaacs/fs-minipass": "^4.0.0",