diff --git a/package.json b/package.json
index a7a7f2f50..254b7e0a4 100644
--- a/package.json
+++ b/package.json
@@ -88,7 +88,7 @@
 	"dependencies": {
 		"chalk": "^5.6.2",
 		"follow-redirects": "^1.15.11",
-		"js-yaml": "^4.1.1",
+		"js-yaml": "^4.3.2",
 		"jsonc-parser": "^3.3.1",
 		"ncp": "^2.0.0",
 		"node-pty": "~1.0.0",
@@ -96,9 +96,9 @@
 		"pull-stream": "^3.7.0",
 		"recursive-readdir": "^2.2.3",
 		"semver": "^7.7.4",
-		"shell-quote": "^1.8.3",
+		"shell-quote": "^1.11.0",
 		"stream-to-pull-stream": "^1.7.3",
-		"tar": "^7.5.10",
+		"tar": "^7.5.21",
 		"text-table": "^0.2.0",
 		"vscode-uri": "^3.1.0",
 		"yargs": "~17.7.2"
diff --git a/yarn.lock b/yarn.lock
index 978cb7953..370edf2f2 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -1935,7 +1935,7 @@ jackspeak@^3.1.2:
   optionalDependencies:
     "@pkgjs/parseargs" "^0.11.0"
 
-js-yaml@^4.1.0, js-yaml@^4.1.1:
+js-yaml@^4.1.0, js-yaml@^4.3.2:
   version "4.3.2"
   resolved "https://registry.yarnpkg.com/js-yaml/-/js-yaml-4.3.2.tgz#8e44fb14a2643c59726bb15787b5f1512cb3d3fb"
   integrity sha512-SFNOvSJ+Dgf/9An904Yx+CgSlIPCkIpao4qo51lpee25TIRejdH3rhR4EZMGoNx3/TP3O+wzWuiTFl4sqbltzA==
@@ -2695,7 +2695,7 @@ shebang-regex@^3.0.0:
   resolved "https://registry.yarnpkg.com/shebang-regex/-/shebang-regex-3.0.0.tgz#ae16f1644d873ecad843b0307b143362d4c42172"
   integrity sha512-7++dFhtcx3353uBaq8DDR4NuxBetBzC7ZQOhmTQInHEd6bSrXdiEyzCvG07Z44UYdLShWUyXt5M/yhz8ekcb1A==
 
-shell-quote@^1.6.1, shell-quote@^1.8.3:
+shell-quote@^1.11.0, shell-quote@^1.6.1:
   version "1.11.0"
   resolved "https://registry.yarnpkg.com/shell-quote/-/shell-quote-1.11.0.tgz#fdbed3f4f297a8090c64cc13c4643c0b3e957c79"
   integrity sha512-JdxDPD0DBTyu08pq0kPC0xSNet/qsU07qT6IsX1AS8oO2ICNRY4ldNa8OAI6PuwAH8tG3lxEhbqmyp4Dw4036g==
@@ -2995,7 +2995,7 @@ supports-preserve-symlinks-flag@^1.0.0:
   resolved "https://registry.yarnpkg.com/supports-preserve-symlinks-flag/-/supports-preserve-symlinks-flag-1.0.0.tgz#6eda4bd344a3c94aea376d4cc31bc77311039e09"
   integrity sha512-ot0WnXS9fgdkgIcePe6RHNk1WA8+muPa6cSjeR3V8K27q9BB1rTE3R1p7Hv0z1ZyAc8s6Vvv8DIyWf681MAt0w==
 
-tar@^7.5.10:
+tar@^7.5.21:
   version "7.5.21"
   resolved "https://registry.yarnpkg.com/tar/-/tar-7.5.21.tgz#b3405af2eb493523ce4379f531e9ebda0601bc59"
   integrity sha512-XdhtCvlMywwxpCW8YEq3lOXBJpUPTR2OHHcwLPO3HwsJqOHa2Ok/oJ7ruGzp+JrKoRPVCzJwAdEjqLW/vNRPHA==