diff --git a/packages/create-next-app/package.json b/packages/create-next-app/package.json
index 611c9bc284..ddbf9ed715 100644
--- a/packages/create-next-app/package.json
+++ b/packages/create-next-app/package.json
@@ -49,7 +49,7 @@
     "glob": "8.0.3",
     "got": "10.7.0",
     "prompts": "2.1.0",
-    "tar": "4.4.10",
+    "tar": "4.4.18",
     "update-check": "1.5.4",
     "validate-npm-package-name": "3.0.0"
   },
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index a02110785f..4846025f6d 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -408,7 +408,7 @@ importers:
       glob: 8.0.3
       got: 10.7.0
       prompts: 2.1.0
-      tar: 4.4.10
+      tar: 4.4.18
       update-check: 1.5.4
       validate-npm-package-name: 3.0.0
     devDependencies:
@@ -432,7 +432,7 @@ importers:
       glob: 8.0.3
       got: 10.7.0
       prompts: 2.1.0
-      tar: 4.4.10
+      tar: 4.4.18
       update-check: 1.5.4
       validate-npm-package-name: 3.0.0
 
@@ -9455,8 +9455,8 @@ packages:
     optionalDependencies:
       fsevents: 2.3.2
 
-  /chownr/1.1.3:
-    resolution: {integrity: sha512-i70fVHhmV3DtTl6nqvZOnIjbY0Pe4kAUjwHj8z0zAdgBtYrJyYwLKCCuRBQ5ppkyL0AkN7HKRnETdmdp1zqNXw==}
+  /chownr/1.1.4:
+    resolution: {integrity: sha512-jJ0bqzaylmJtVnNgzTeSOs8DPavpbYgEr/b0YL8/2GO3xJEhInFmhKMUnEJQjZumK7KXGFhUy89PrsJWlakBVg==}
     dev: true
 
   /chownr/2.0.0:
@@ -10148,7 +10148,7 @@ packages:
       make-dir: 2.1.0
       nested-error-stacks: 2.1.0
       pify: 4.0.1
-      safe-buffer: 5.2.0
+      safe-buffer: 5.2.1
     dev: true
 
   /cpy/7.3.0:
@@ -17139,7 +17139,7 @@ packages:
   /minipass/2.9.0:
     resolution: {integrity: sha512-wxfUjg9WebH+CUDX/CdbRlh5SmfZiy/hpkxaRI16Y9W56Pa75sWgd/rvFilSgrauD9NyFymP/+JFV3KwzIsJeg==}
     dependencies:
-      safe-buffer: 5.2.0
+      safe-buffer: 5.2.1
       yallist: 3.1.1
     dev: true
 
@@ -17482,7 +17482,7 @@ packages:
       request: 2.88.2
       rimraf: 2.7.1
       semver: 5.7.1
-      tar: 4.4.13
+      tar: 4.4.18
       which: 1.3.1
     dev: true
 
@@ -20449,7 +20449,7 @@ packages:
     resolution: {integrity: sha512-JL39c60XlzCVgNrO+qq68FoNb56w/m7JYvGR2jT5iR1xBrUA3Mfx5Twk5rqTThPmQKMWydGmq8oFtDlxfrmxnQ==}
     dependencies:
       rc: 1.2.8
-      safe-buffer: 5.2.0
+      safe-buffer: 5.2.1
     dev: true
 
   /registry-auth-token/4.2.1:
@@ -22295,24 +22295,11 @@ packages:
     resolution: {integrity: sha512-FBk4IesMV1rBxX2tfiK8RAmogtWn53puLOQlvO8XuwlgxcYbP4mVPS9Ph4aeamSyyVjOl24aYWAuc8U5kCVwMw==}
     engines: {node: '>=6'}
 
-  /tar/4.4.10:
-    resolution: {integrity: sha512-g2SVs5QIxvo6OLp0GudTqEf05maawKUxXru104iaayWA09551tFCTI8f1Asb4lPfkBr91k07iL4c11XO3/b0tA==}
-    engines: {node: '>=4.5'}
-    dependencies:
-      chownr: 1.1.3
-      fs-minipass: 1.2.7
-      minipass: 2.9.0
-      minizlib: 1.3.3
-      mkdirp: 0.5.5
-      safe-buffer: 5.2.0
-      yallist: 3.1.1
-    dev: true
-
-  /tar/4.4.13:
-    resolution: {integrity: sha512-w2VwSrBoHa5BsSyH+KxEqeQBAllHhccyMFVHtGtdMpF4W7IRWfZjFiQceJPChOeTsSDVUpER2T8FA93pr0L+QA==}
+  /tar/4.4.18:
+    resolution: {integrity: sha512-ZuOtqqmkV9RE1+4odd+MhBpibmCxNP6PJhH/h2OqNuotTX7/XHPZQJv2pKvWMplFH9SIZZhitehh6vBH6LO8Pg==}
     engines: {node: '>=4.5'}
     dependencies:
-      chownr: 1.1.3
+      chownr: 1.1.4
       fs-minipass: 1.2.7
       minipass: 2.9.0
       minizlib: 1.3.3