diff --git a/CHANGELOG.md b/CHANGELOG.md
index 307bc3ddf..b95628a87 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,3 +1,9 @@
+### 1.3.7 Maintenance Release
+
+Runtime
+
+ - Update to latest tar module
+
 ### 1.3.6 Maintenance Release
 
 Editor
diff --git a/package.json b/package.json
index d89cbdc02..e734eb070 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
     "name": "node-red",
-    "version": "1.3.6",
+    "version": "1.3.7",
     "description": "Low-code programming for event-driven applications",
     "homepage": "http://nodered.org",
     "license": "Apache-2.0",
@@ -74,7 +74,7 @@
         "raw-body": "2.4.1",
         "request": "2.88.0",
         "semver": "6.3.0",
-        "tar": "6.1.2",
+        "tar": "6.1.11",
         "uglify-js": "3.13.3",
         "ws": "6.2.2",
         "xml2js": "0.4.23"
diff --git a/packages/node_modules/@node-red/editor-api/package.json b/packages/node_modules/@node-red/editor-api/package.json
index f5c89729e..f8f380c1d 100644
--- a/packages/node_modules/@node-red/editor-api/package.json
+++ b/packages/node_modules/@node-red/editor-api/package.json
@@ -1,6 +1,6 @@
 {
     "name": "@node-red/editor-api",
-    "version": "1.3.6",
+    "version": "1.3.7",
     "license": "Apache-2.0",
     "main": "./lib/index.js",
     "repository": {
@@ -16,8 +16,8 @@
         }
     ],
     "dependencies": {
-        "@node-red/util": "1.3.6",
-        "@node-red/editor-client": "1.3.6",
+        "@node-red/util": "1.3.7",
+        "@node-red/editor-client": "1.3.7",
         "bcryptjs": "2.4.3",
         "body-parser": "1.19.0",
         "clone": "2.1.2",
diff --git a/packages/node_modules/@node-red/editor-client/package.json b/packages/node_modules/@node-red/editor-client/package.json
index 54fdfb286..a15248fcf 100644
--- a/packages/node_modules/@node-red/editor-client/package.json
+++ b/packages/node_modules/@node-red/editor-client/package.json
@@ -1,6 +1,6 @@
 {
     "name": "@node-red/editor-client",
-    "version": "1.3.6",
+    "version": "1.3.7",
     "license": "Apache-2.0",
     "repository": {
         "type": "git",
diff --git a/packages/node_modules/@node-red/nodes/package.json b/packages/node_modules/@node-red/nodes/package.json
index 304af1a9e..8ddebd0df 100644
--- a/packages/node_modules/@node-red/nodes/package.json
+++ b/packages/node_modules/@node-red/nodes/package.json
@@ -1,6 +1,6 @@
 {
     "name": "@node-red/nodes",
-    "version": "1.3.6",
+    "version": "1.3.7",
     "license": "Apache-2.0",
     "repository": {
         "type": "git",
diff --git a/packages/node_modules/@node-red/registry/package.json b/packages/node_modules/@node-red/registry/package.json
index 6bdfd9bbc..5930d3400 100644
--- a/packages/node_modules/@node-red/registry/package.json
+++ b/packages/node_modules/@node-red/registry/package.json
@@ -1,6 +1,6 @@
 {
     "name": "@node-red/registry",
-    "version": "1.3.6",
+    "version": "1.3.7",
     "license": "Apache-2.0",
     "main": "./lib/index.js",
     "repository": {
@@ -16,11 +16,11 @@
         }
     ],
     "dependencies": {
-        "@node-red/util": "1.3.6",
+        "@node-red/util": "1.3.7",
         "clone": "2.1.2",
         "fs-extra": "8.1.0",
         "semver": "6.3.0",
-        "tar": "6.1.2",
+        "tar": "6.1.11",
         "uglify-js": "3.13.3"
     }
 }
diff --git a/packages/node_modules/@node-red/runtime/package.json b/packages/node_modules/@node-red/runtime/package.json
index 44d6fe88f..2de86b23b 100644
--- a/packages/node_modules/@node-red/runtime/package.json
+++ b/packages/node_modules/@node-red/runtime/package.json
@@ -1,6 +1,6 @@
 {
     "name": "@node-red/runtime",
-    "version": "1.3.6",
+    "version": "1.3.7",
     "license": "Apache-2.0",
     "main": "./lib/index.js",
     "repository": {
@@ -16,8 +16,8 @@
         }
     ],
     "dependencies": {
-        "@node-red/registry": "1.3.6",
-        "@node-red/util": "1.3.6",
+        "@node-red/registry": "1.3.7",
+        "@node-red/util": "1.3.7",
         "async-mutex": "0.3.1",
         "clone": "2.1.2",
         "express": "4.17.1",
diff --git a/packages/node_modules/@node-red/util/package.json b/packages/node_modules/@node-red/util/package.json
index 12b424f0a..b0f2f1480 100644
--- a/packages/node_modules/@node-red/util/package.json
+++ b/packages/node_modules/@node-red/util/package.json
@@ -1,6 +1,6 @@
 {
     "name": "@node-red/util",
-    "version": "1.3.6",
+    "version": "1.3.7",
     "license": "Apache-2.0",
     "repository": {
         "type": "git",
diff --git a/packages/node_modules/node-red/package.json b/packages/node_modules/node-red/package.json
index 77362fa61..12b6f7917 100644
--- a/packages/node_modules/node-red/package.json
+++ b/packages/node_modules/node-red/package.json
@@ -1,6 +1,6 @@
 {
     "name": "node-red",
-    "version": "1.3.6",
+    "version": "1.3.7",
     "description": "Low-code programming for event-driven applications",
     "homepage": "http://nodered.org",
     "license": "Apache-2.0",
@@ -31,10 +31,10 @@
         "flow"
     ],
     "dependencies": {
-        "@node-red/editor-api": "1.3.6",
-        "@node-red/runtime": "1.3.6",
-        "@node-red/util": "1.3.6",
-        "@node-red/nodes": "1.3.6",
+        "@node-red/editor-api": "1.3.7",
+        "@node-red/runtime": "1.3.7",
+        "@node-red/util": "1.3.7",
+        "@node-red/nodes": "1.3.7",
         "basic-auth": "2.0.1",
         "bcryptjs": "2.4.3",
         "express": "4.17.1",