diff --git a/packages/create-next-app/package.json b/packages/create-next-app/package.json
index d5a8acf592e09..899d6bd245e3b 100644
--- a/packages/create-next-app/package.json
+++ b/packages/create-next-app/package.json
@@ -42,7 +42,7 @@
     "got": "10.7.0",
     "prompts": "2.1.0",
     "rimraf": "3.0.0",
-    "tar": "4.4.10",
+    "tar": "4.4.18",
     "typescript": "3.8.3",
     "update-check": "1.5.4",
     "validate-npm-package-name": "3.0.0"