diff --git a/package-lock.json b/package-lock.json
index 2fdcff3468..c62588e7ee 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -57,7 +57,7 @@
         "simple-git": "3.36.0",
         "simple-plist": "1.4.0",
         "source-map": "0.8.0",
-        "tar": "7.5.9",
+        "tar": "7.5.22",
         "ts-morph": "25.0.1",
         "tunnel": "0.0.6",
         "typescript": "5.7.3",
@@ -95,7 +95,7 @@
         "@types/shelljs": "^0.8.11",
         "@types/sinon": "^17.0.3",
         "@types/tabtab": "^3.0.2",
-        "@types/tar": "6.1.13",
+        "@types/tar": "7.0.87",
         "@types/tunnel": "0.0.7",
         "@types/universal-analytics": "0.4.8",
         "@types/uuid": "^10.0.0",
@@ -1922,24 +1922,14 @@
       }
     },
     "node_modules/@types/tar": {
-      "version": "6.1.13",
-      "resolved": "https://registry.npmjs.org/@types/tar/-/tar-6.1.13.tgz",
-      "integrity": "sha512-IznnlmU5f4WcGTh2ltRu/Ijpmk8wiWXfF0VA4s+HPjHZgvFggk1YaIkbo5krX/zUCzWF8N/l4+W/LNxnvAJ8nw==",
+      "version": "7.0.87",
+      "resolved": "https://registry.npmjs.org/@types/tar/-/tar-7.0.87.tgz",
+      "integrity": "sha512-3IxNBV8LeY5oi2ZFpvAhOtW1+mHswkzM7BuisVrwJgPv67GBO2rkLPQlEKtzfHuLdhDDczhkCZeT+RuizMay4A==",
+      "deprecated": "This is a stub types definition. tar provides its own type definitions, so you do not need this installed.",
       "dev": true,
       "license": "MIT",
       "dependencies": {
-        "@types/node": "*",
-        "minipass": "^4.0.0"
-      }
-    },
-    "node_modules/@types/tar/node_modules/minipass": {
-      "version": "4.2.8",
-      "resolved": "https://registry.npmjs.org/minipass/-/minipass-4.2.8.tgz",
-      "integrity": "sha512-fNzuVyifolSLFL4NzpF+wEF4qrgqaaKX0haXPQEdQ7NKAN+WecoKMHV09YcuL/DHxrUsYQOK3MiuDf7Ip2OXfQ==",
-      "dev": true,
-      "license": "ISC",
-      "engines": {
-        "node": ">=8"
+        "tar": "*"
       }
     },
     "node_modules/@types/tunnel": {
@@ -7778,9 +7768,9 @@
       }
     },
     "node_modules/tar": {
-      "version": "7.5.9",
-      "resolved": "https://registry.npmjs.org/tar/-/tar-7.5.9.tgz",
-      "integrity": "sha512-BTLcK0xsDh2+PUe9F6c2TlRp4zOOBMTkoQHQIWSIzI0R7KG46uEwq4OPk2W7bZcprBMsuaeFsqwYr7pjh6CuHg==",
+      "version": "7.5.22",
+      "resolved": "https://registry.npmjs.org/tar/-/tar-7.5.22.tgz",
+      "integrity": "sha512-MFO/QzvtAOmJbkhOaCTvbGcFN9L9b+JunIsDwaKljSOdcLMea3NJ1k9Usz/rjdfSXTq4dfzfeS7W4p4YOAAHeA==",
       "license": "BlueOak-1.0.0",
       "dependencies": {
         "@isaacs/fs-minipass": "^4.0.0",
diff --git a/package.json b/package.json
index 24606b6d30..766c0f431a 100644
--- a/package.json
+++ b/package.json
@@ -86,7 +86,7 @@
     "simple-git": "3.36.0",
     "simple-plist": "1.4.0",
     "source-map": "0.8.0",
-    "tar": "7.5.9",
+    "tar": "7.5.22",
     "ts-morph": "25.0.1",
     "tunnel": "0.0.6",
     "typescript": "5.7.3",
@@ -118,7 +118,7 @@
     "@types/shelljs": "^0.8.11",
     "@types/sinon": "^17.0.3",
     "@types/tabtab": "^3.0.2",
-    "@types/tar": "6.1.13",
+    "@types/tar": "7.0.87",
     "@types/tunnel": "0.0.7",
     "@types/universal-analytics": "0.4.8",
     "@types/uuid": "^10.0.0",