diff --git a/foreign/package.json b/foreign/package.json
index 12b369617..4a3c7dfa1 100644
--- a/foreign/package.json
+++ b/foreign/package.json
@@ -15,7 +15,7 @@
     "jsonrepair": "^3.13.2",
     "registry-lib": "file:../lib",
     "semver": "^7.7.3",
-    "tar": "^7.5.3",
+    "tar": "^7.5.10",
     "tmp": "^0.2.5",
     "yaml": "^2.8.2"
   }
diff --git a/package-lock.json b/package-lock.json
index 4a4a48f72..123db9397 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -37,7 +37,7 @@
         "jsonrepair": "^3.13.2",
         "registry-lib": "file:../lib",
         "semver": "^7.7.3",
-        "tar": "^7.5.3",
+        "tar": "^7.5.10",
         "tmp": "^0.2.5",
         "yaml": "^2.8.2"
       }
@@ -2735,9 +2735,9 @@
       "license": "MIT"
     },
     "node_modules/tar": {
-      "version": "7.5.3",
-      "resolved": "https://registry.npmjs.org/tar/-/tar-7.5.3.tgz",
-      "integrity": "sha512-ENg5JUHUm2rDD7IvKNFGzyElLXNjachNLp6RaGf4+JOgxXHkqA+gq81ZAMCUmtMtqBsoU62lcp6S27g1LCYGGQ==",
+      "version": "7.5.10",
+      "resolved": "https://registry.npmjs.org/tar/-/tar-7.5.10.tgz",
+      "integrity": "sha512-8mOPs1//5q/rlkNSPcCegA6hiHJYDmSLEI8aMH/CdSQJNWztHC9WHNam5zdQlfpTwB9Xp7IBEsHfV5LKMJGVAw==",
       "license": "BlueOak-1.0.0",
       "dependencies": {
         "@isaacs/fs-minipass": "^4.0.0",