diff --git a/package.json b/package.json
index 63e6db5cef..cac0c77cf2 100644
--- a/package.json
+++ b/package.json
@@ -58,7 +58,7 @@
 		"execa": "9.6.1",
 		"ignore-walk": "9.0.0",
 		"js-yaml": "5.2.1",
-		"tar": "7.5.20"
+		"tar": "7.5.21"
 	},
 	"devDependencies": {
 		"@eslint/js": "9.39.5",
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 4c73584bda..dd7afbfad5 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -27,8 +27,8 @@ importers:
         specifier: 5.2.1
         version: 5.2.1
       tar:
-        specifier: 7.5.20
-        version: 7.5.20
+        specifier: 7.5.21
+        version: 7.5.21
     devDependencies:
       '@eslint/js':
         specifier: 9.39.5
@@ -8613,8 +8613,8 @@ packages:
   tar-stream@3.2.0:
     resolution: {integrity: sha512-ojzvCvVaNp6aOTFmG7jaRD0meowIAuPc3cMMhSgKiVWws1GyHbGd/xvnyuRKcKlMpt3qvxx6r0hreCNITP9hIg==}
 
-  tar@7.5.20:
-    resolution: {integrity: sha512-9FcyK4PA6+WbzlTM9WhQm6vB5W7cP7dUiPsv1g7YDwEQnQ1CGpK3MGlKk/ITVWMk05kHZuBhmVhiv8LZoy/PFQ==}
+  tar@7.5.21:
+    resolution: {integrity: sha512-XdhtCvlMywwxpCW8YEq3lOXBJpUPTR2OHHcwLPO3HwsJqOHa2Ok/oJ7ruGzp+JrKoRPVCzJwAdEjqLW/vNRPHA==}
     engines: {node: '>=18'}
 
   taskkill@5.0.0:
@@ -15928,7 +15928,7 @@ snapshots:
       nopt: 10.0.1
       proc-log: 7.0.0
       semver: 7.8.5
-      tar: 7.5.20
+      tar: 7.5.21
       tinyglobby: 0.2.17
       undici: 6.25.0
       which: 7.0.0
@@ -17586,7 +17586,7 @@ snapshots:
       - bare-buffer
       - react-native-b4a
 
-  tar@7.5.20:
+  tar@7.5.21:
     dependencies:
       '@isaacs/fs-minipass': 4.0.1
       chownr: 3.0.0
diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml
index 2eb12d2e0c..45c691ac27 100644
--- a/pnpm-workspace.yaml
+++ b/pnpm-workspace.yaml
@@ -60,6 +60,8 @@ minimumReleaseAgeExclude:
   - typeorm@1.1.0
   # Renovate security update: @fastify/static@10.1.2
   - "@fastify/static@10.1.2"
+  # Renovate security update: tar@7.5.21
+  - tar@7.5.21
 overrides:
   '@aiscript-dev/aiscript-languageserver': '-'
   'bullmq>ioredis': 5.11.1