diff --git a/packages/uppy/package.json b/packages/uppy/package.json
index a98a0bc195..45d2b01c63 100644
--- a/packages/uppy/package.json
+++ b/packages/uppy/package.json
@@ -89,7 +89,7 @@
     "postcss": "^8.5.15",
     "postcss-cli": "^11.0.1",
     "sass": "^1.89.2",
-    "tar": "^7.5.7",
+    "tar": "^7.5.20",
     "typescript": "^5.8.3"
   }
 }
diff --git a/yarn.lock b/yarn.lock
index 2bd66dd77f..5937170cf5 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -27161,7 +27161,7 @@ __metadata:
   languageName: node
   linkType: hard
 
-"tar@npm:^7.4.3, tar@npm:^7.5.7":
+"tar@npm:^7.4.3":
   version: 7.5.12
   resolution: "tar@npm:7.5.12"
   dependencies:
@@ -27174,6 +27174,19 @@ __metadata:
   languageName: node
   linkType: hard
 
+"tar@npm:^7.5.20":
+  version: 7.5.20
+  resolution: "tar@npm:7.5.20"
+  dependencies:
+    "@isaacs/fs-minipass": "npm:^4.0.0"
+    chownr: "npm:^3.0.0"
+    minipass: "npm:^7.1.2"
+    minizlib: "npm:^3.1.0"
+    yallist: "npm:^5.0.0"
+  checksum: 10/90a0fe423ac921197ad5eefc5e5f7ad7f42b06e80444c8c347c1e4112384cbe9cb53ade3ef71748eed3684888756869c2aeef6b6303c766101f3217e254d4be9
+  languageName: node
+  linkType: hard
+
 "tar@npm:^7.5.4":
   version: 7.5.15
   resolution: "tar@npm:7.5.15"
@@ -28114,7 +28127,7 @@ __metadata:
     postcss: "npm:^8.5.15"
     postcss-cli: "npm:^11.0.1"
     sass: "npm:^1.89.2"
-    tar: "npm:^7.5.7"
+    tar: "npm:^7.5.20"
     typescript: "npm:^5.8.3"
   languageName: unknown
   linkType: soft