diff --git a/packages/cli/package.json b/packages/cli/package.json
index 198371c..57fcd02 100644
--- a/packages/cli/package.json
+++ b/packages/cli/package.json
@@ -40,7 +40,7 @@
     "@polyskill/core": "workspace:*",
     "chalk": "^5.6.2",
     "commander": "^13.1.0",
-    "tar": "^7.5.19"
+    "tar": "^7.5.21"
   },
   "files": [
     "dist"
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 97d1552..7b7c32f 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -23,8 +23,8 @@ importers:
         specifier: ^13.1.0
         version: 13.1.0
       tar:
-        specifier: ^7.5.19
-        version: 7.5.19
+        specifier: ^7.5.21
+        version: 7.5.21
     devDependencies:
       '@types/node':
         specifier: ^22.20.0
@@ -746,8 +746,8 @@ packages:
   strip-literal@3.1.0:
     resolution: {integrity: sha512-8r3mkIM/2+PpjHoOtiAW8Rg3jJLHaV7xPwG+YRGrv6FP0wwk/toTpATxWYOW0BKdWwl82VT2tFYi5DlROa0Mxg==}
 
-  tar@7.5.19:
-    resolution: {integrity: sha512-4LeEWl96twnS2Q7Bz4MGqgazLqO+hJN63GZxXoIqh1T3VweYD997gbU1ItNsQafqqXTXd5WFyFdReLtwvRBNiw==}
+  tar@7.5.21:
+    resolution: {integrity: sha512-XdhtCvlMywwxpCW8YEq3lOXBJpUPTR2OHHcwLPO3HwsJqOHa2Ok/oJ7ruGzp+JrKoRPVCzJwAdEjqLW/vNRPHA==}
     engines: {node: '>=18'}
 
   tinybench@2.9.0:
@@ -1420,7 +1420,7 @@ snapshots:
     dependencies:
       js-tokens: 9.0.1
 
-  tar@7.5.19:
+  tar@7.5.21:
     dependencies:
       '@isaacs/fs-minipass': 4.0.1
       chownr: 3.0.0