diff --git a/package.json b/package.json
index 2296ad220..33dd27ca7 100644
--- a/package.json
+++ b/package.json
@@ -73,7 +73,7 @@
         "passport-oauth2-client-password": "0.1.2",
         "raw-body": "2.4.1",
         "semver": "7.3.5",
-        "tar": "6.1.2",
+        "tar": "6.1.9",
         "tough-cookie": "4.0.0",
         "uglify-js": "3.13.10",
         "uuid": "8.3.2",
diff --git a/packages/node_modules/@node-red/registry/package.json b/packages/node_modules/@node-red/registry/package.json
index 999352647..2513b8f33 100644
--- a/packages/node_modules/@node-red/registry/package.json
+++ b/packages/node_modules/@node-red/registry/package.json
@@ -20,7 +20,7 @@
         "clone": "2.1.2",
         "fs-extra": "10.0.0",
         "semver": "7.3.5",
-        "tar": "6.1.2",
+        "tar": "6.1.9",
         "uglify-js": "3.13.10"
     }
 }