diff --git a/package.json b/package.json
index 20a95b5fe7..abe0c6c3e5 100644
--- a/package.json
+++ b/package.json
@@ -238,7 +238,7 @@
     "serializr": "^2.0.3",
     "shell-env": "^3.0.1",
     "spdy": "^4.0.2",
-    "tar": "^6.0.5",
+    "tar": "^6.1.2",
     "tcp-port-used": "^1.0.1",
     "tempy": "^0.5.0",
     "url-parse": "^1.5.1",
diff --git a/yarn.lock b/yarn.lock
index f6d70866db..4f70ea04d9 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -14000,10 +14000,10 @@ tar@^4.4.10, tar@^4.4.12, tar@^4.4.13:
     safe-buffer "^5.1.2"
     yallist "^3.0.3"
 
-tar@^6.0.2, tar@^6.0.5:
-  version "6.1.0"
-  resolved "https://registry.yarnpkg.com/tar/-/tar-6.1.0.tgz#d1724e9bcc04b977b18d5c573b333a2207229a83"
-  integrity sha512-DUCttfhsnLCjwoDoFcI+B2iJgYa93vBnDUATYEeRx6sntCTdN01VnqsIuTlALXla/LWooNg0yEGeB+Y8WdFxGA==
+tar@^6.0.2, tar@^6.1.2:
+  version "6.1.2"
+  resolved "https://registry.yarnpkg.com/tar/-/tar-6.1.2.tgz#1f045a90a6eb23557a603595f41a16c57d47adc6"
+  integrity sha512-EwKEgqJ7nJoS+s8QfLYVGMDmAsj+StbI2AM/RTHeUSsOw6Z8bwNBRv5z3CY0m7laC5qUAqruLX5AhMuc5deY3Q==
   dependencies:
     chownr "^2.0.0"
     fs-minipass "^2.0.0"