diff --git a/foreign/package.json b/foreign/package.json
index a221fc4a..b177204f 100644
--- a/foreign/package.json
+++ b/foreign/package.json
@@ -15,7 +15,7 @@
     "jsonrepair": "^3.13.3",
     "registry-lib": "file:../lib",
     "semver": "^7.7.4",
-    "tar": "^7.5.11",
+    "tar": "^7.5.21",
     "tmp": "^0.2.5",
     "yaml": "^2.8.2"
   }
diff --git a/nix/overlay.nix b/nix/overlay.nix
index beb799a6..54fa965e 100644
--- a/nix/overlay.nix
+++ b/nix/overlay.nix
@@ -176,7 +176,7 @@ in
       ++ prev.lib.optionals prev.stdenv.isDarwin [ prev.darwin.cctools ];
 
     # To update: run `nix build .#server` and copy the hash from the error
-    npmDepsHash = "sha256-MLW5lGkK/7UutxmJ/GigygU3egRuQjX4dJlvNtGk5lY=";
+    npmDepsHash = "sha256-qlHO3I/kb5/PDQA2aoVbSpvSnjS0CcJoEdGuCkAd+hA=";
 
     installPhase = ''
       mkdir -p $out
diff --git a/package-lock.json b/package-lock.json
index f0ff93e4..2ca82956 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -37,7 +37,7 @@
         "jsonrepair": "^3.13.3",
         "registry-lib": "file:../lib",
         "semver": "^7.7.4",
-        "tar": "^7.5.11",
+        "tar": "^7.5.21",
         "tmp": "^0.2.5",
         "yaml": "^2.8.2"
       }
@@ -2728,9 +2728,9 @@
       "license": "MIT"
     },
     "node_modules/tar": {
-      "version": "7.5.11",
-      "resolved": "https://registry.npmjs.org/tar/-/tar-7.5.11.tgz",
-      "integrity": "sha512-ChjMH33/KetonMTAtpYdgUFr0tbz69Fp2v7zWxQfYZX4g5ZN2nOBXm1R2xyA+lMIKrLKIoKAwFj93jE/avX9cQ==",
+      "version": "7.5.21",
+      "resolved": "https://registry.npmjs.org/tar/-/tar-7.5.21.tgz",
+      "integrity": "sha512-XdhtCvlMywwxpCW8YEq3lOXBJpUPTR2OHHcwLPO3HwsJqOHa2Ok/oJ7ruGzp+JrKoRPVCzJwAdEjqLW/vNRPHA==",
       "license": "BlueOak-1.0.0",
       "dependencies": {
         "@isaacs/fs-minipass": "^4.0.0",