diff --git a/packages/utils/package.json b/packages/utils/package.json
index cb8ccc3d70..7c4312ad3a 100644
--- a/packages/utils/package.json
+++ b/packages/utils/package.json
@@ -25,7 +25,7 @@
     "libnpmpublish": "^11.1.3",
     "minimatch": "^10.2.4",
     "npm-registry-fetch": "^19.1.1",
-    "tar": "^7.5.9",
+    "tar": "^7.5.16",
     "tar-stream": "^3.1.8",
     "which": "^6.0.1"
   },
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index b473eb1e40..128d44116c 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -479,8 +479,8 @@ importers:
         specifier: ^19.1.1
         version: 19.1.1
       tar:
-        specifier: ^7.5.9
-        version: 7.5.9
+        specifier: ^7.5.16
+        version: 7.5.16
       tar-stream:
         specifier: ^3.1.8
         version: 3.1.8
@@ -2097,6 +2097,7 @@ packages:
 
   '@ungap/structured-clone@1.3.0':
     resolution: {integrity: sha512-WmoN8qaIAo7WTYWbAZuG8PYEhn5fkz7dZrqTBZ7dtt//lL2Gwms1IcnQ5yHqjDfX8Ft5j4YzDM23f87zBfDe9g==}
+    deprecated: Potential CWE-502 - Update to 1.3.1 or higher
 
   '@unrs/resolver-binding-android-arm-eabi@1.11.1':
     resolution: {integrity: sha512-ppLRUgHVaGRWUx0R0Ut06Mjo9gBaBkg3v/8AxusGLhsIotbBLuRk51rAzqLC8gq6NyyAojEXglNjzf6R948DNw==}
@@ -4768,6 +4769,10 @@ packages:
   tar-stream@3.1.8:
     resolution: {integrity: sha512-U6QpVRyCGHva435KoNWy9PRoi2IFYCgtEhq9nmrPPpbRacPs9IH4aJ3gbrFC8dPcXvdSZ4XXfXT5Fshbp2MtlQ==}
 
+  tar@7.5.16:
+    resolution: {integrity: sha512-56adEpPMouktRlBLXiaYFFzZ/3+JXa8P9n7WbR+ibIjtviN55mEaOkiysCnPnWm+7kkui1Dn8J9l+g6zV8731w==}
+    engines: {node: '>=18'}
+
   tar@7.5.9:
     resolution: {integrity: sha512-BTLcK0xsDh2+PUe9F6c2TlRp4zOOBMTkoQHQIWSIzI0R7KG46uEwq4OPk2W7bZcprBMsuaeFsqwYr7pjh6CuHg==}
     engines: {node: '>=18'}
@@ -9595,7 +9600,7 @@ snapshots:
       nopt: 9.0.0
       proc-log: 6.1.0
       semver: 7.7.4
-      tar: 7.5.9
+      tar: 7.5.16
       tinyglobby: 0.2.15
       which: 6.0.1
     transitivePeerDependencies:
@@ -10377,6 +10382,14 @@ snapshots:
       - bare-buffer
       - react-native-b4a
 
+  tar@7.5.16:
+    dependencies:
+      '@isaacs/fs-minipass': 4.0.1
+      chownr: 3.0.0
+      minipass: 7.1.3
+      minizlib: 3.1.0
+      yallist: 5.0.0
+
   tar@7.5.9:
     dependencies:
       '@isaacs/fs-minipass': 4.0.1