diff --git a/package-lock.json b/package-lock.json
index 3fec090..4e177c2 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -16,7 +16,7 @@
         "@actions/http-client": "^4.0.1",
         "@actions/io": "^3.0.2",
         "adm-zip": "^0.5.17",
-        "tar": "^7.5.13"
+        "tar": "^7.5.17"
       },
       "devDependencies": {
         "@vercel/ncc": "^0.38.4",
@@ -5416,9 +5416,9 @@
       }
     },
     "node_modules/tar": {
-      "version": "7.5.13",
-      "resolved": "https://registry.npmjs.org/tar/-/tar-7.5.13.tgz",
-      "integrity": "sha512-tOG/7GyXpFevhXVh8jOPJrmtRpOTsYqUIkVdVooZYJS/z8WhfQUX8RJILmeuJNinGAMSu1veBr4asSHFt5/hng==",
+      "version": "7.5.17",
+      "resolved": "https://registry.npmjs.org/tar/-/tar-7.5.17.tgz",
+      "integrity": "sha512-wPEBwzapC+2PaTYPH6e2L+cNOEE227S47wUYFqlegcs8zlLLmeb9Fcff1HVZY4Fwku/1Eyv38n7GYwB2aaS71g==",
       "license": "BlueOak-1.0.0",
       "dependencies": {
         "@isaacs/fs-minipass": "^4.0.0",
diff --git a/package.json b/package.json
index e3ca1be..91827b1 100644
--- a/package.json
+++ b/package.json
@@ -32,7 +32,7 @@
     "@actions/http-client": "^4.0.1",
     "@actions/io": "^3.0.2",
     "adm-zip": "^0.5.17",
-    "tar": "^7.5.13"
+    "tar": "^7.5.17"
   },
   "devDependencies": {
     "@vercel/ncc": "^0.38.4",