diff --git a/packages/uppy/package.json b/packages/uppy/package.json
index a98a0bc195..8346afabb5 100644
--- a/packages/uppy/package.json
+++ b/packages/uppy/package.json
@@ -89,7 +89,7 @@
     "postcss": "^8.5.15",
     "postcss-cli": "^11.0.1",
     "sass": "^1.89.2",
-    "tar": "^7.5.7",
+    "tar": "^7.5.21",
     "typescript": "^5.8.3"
   }
 }
diff --git a/yarn.lock b/yarn.lock
index 2bd66dd77f..efd9292053 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -27161,7 +27161,7 @@ __metadata:
   languageName: node
   linkType: hard
 
-"tar@npm:^7.4.3, tar@npm:^7.5.7":
+"tar@npm:^7.4.3":
   version: 7.5.12
   resolution: "tar@npm:7.5.12"
   dependencies:
@@ -27174,6 +27174,19 @@ __metadata:
   languageName: node
   linkType: hard
 
+"tar@npm:^7.5.21":
+  version: 7.5.21
+  resolution: "tar@npm:7.5.21"
+  dependencies:
+    "@isaacs/fs-minipass": "npm:^4.0.0"
+    chownr: "npm:^3.0.0"
+    minipass: "npm:^7.1.2"
+    minizlib: "npm:^3.1.0"
+    yallist: "npm:^5.0.0"
+  checksum: 10/a1b7dcee15e4f7dbef7f07c3cf0fe946248efabd1cb029b54c698d817dfc2876c75bcaa164a12dd21191e385759ce3e37fea562cf4aabaa00984ef9ed3c48d17
+  languageName: node
+  linkType: hard
+
 "tar@npm:^7.5.4":
   version: 7.5.15
   resolution: "tar@npm:7.5.15"
@@ -28114,7 +28127,7 @@ __metadata:
     postcss: "npm:^8.5.15"
     postcss-cli: "npm:^11.0.1"
     sass: "npm:^1.89.2"
-    tar: "npm:^7.5.7"
+    tar: "npm:^7.5.21"
     typescript: "npm:^5.8.3"
   languageName: unknown
   linkType: soft