diff --git a/package-lock.json b/package-lock.json
index 9315a66..f1e3d6e 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -20,7 +20,7 @@
         "npm-config": "^0.2.0",
         "protobufjs": ">=8.2.0",
         "public-google-sheets-parser": "^1.3.2",
-        "tar": ">=4.4.18",
+        "tar": ">=7.5.15",
         "zod": "^4.4.3"
       },
       "devDependencies": {
@@ -4633,9 +4633,9 @@
       }
     },
     "node_modules/tar": {
-      "version": "7.5.13",
-      "resolved": "https://registry.npmjs.org/tar/-/tar-7.5.13.tgz",
-      "integrity": "sha512-tOG/7GyXpFevhXVh8jOPJrmtRpOTsYqUIkVdVooZYJS/z8WhfQUX8RJILmeuJNinGAMSu1veBr4asSHFt5/hng==",
+      "version": "7.5.15",
+      "resolved": "https://registry.npmjs.org/tar/-/tar-7.5.15.tgz",
+      "integrity": "sha512-dzGK0boVlC4W5QFuQN1EFSl3bIDYsk7Tj40U6eIBnK2k/8ml7TZ5agbI5j5+qnoVcAA+rNtBml8SEiLxZpNqRQ==",
       "license": "BlueOak-1.0.0",
       "dependencies": {
         "@isaacs/fs-minipass": "^4.0.0",
diff --git a/package.json b/package.json
index 0c4b59e..ecfa53b 100644
--- a/package.json
+++ b/package.json
@@ -32,7 +32,7 @@
     "npm-config": "^0.2.0",
     "protobufjs": ">=8.2.0",
     "public-google-sheets-parser": "^1.3.2",
-    "tar": ">=4.4.18",
+    "tar": ">=7.5.15",
     "zod": "^4.4.3"
   },
   "scripts": {