diff --git a/package-lock.json b/package-lock.json
index 7e07fb1..2482576 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,6 +1,6 @@
 {
   "name": "degit",
-  "version": "2.8.1",
+  "version": "2.8.4",
   "lockfileVersion": 1,
   "requires": true,
   "dependencies": {
@@ -2610,9 +2610,9 @@
       }
     },
     "tar": {
-      "version": "6.1.0",
-      "resolved": "https://registry.npmjs.org/tar/-/tar-6.1.0.tgz",
-      "integrity": "sha512-DUCttfhsnLCjwoDoFcI+B2iJgYa93vBnDUATYEeRx6sntCTdN01VnqsIuTlALXla/LWooNg0yEGeB+Y8WdFxGA==",
+      "version": "6.1.2",
+      "resolved": "https://registry.npmjs.org/tar/-/tar-6.1.2.tgz",
+      "integrity": "sha512-EwKEgqJ7nJoS+s8QfLYVGMDmAsj+StbI2AM/RTHeUSsOw6Z8bwNBRv5z3CY0m7laC5qUAqruLX5AhMuc5deY3Q==",
       "dev": true,
       "requires": {
         "chownr": "^2.0.0",
diff --git a/package.json b/package.json
index 3189a37..e589277 100644
--- a/package.json
+++ b/package.json
@@ -53,7 +53,7 @@
 		"rollup-plugin-commonjs": "10.1.0",
 		"sander": "0.6.0",
 		"source-map-support": "0.5.19",
-		"tar": "6.1.0",
+		"tar": "6.1.2",
 		"tiny-glob": "0.2.8"
 	},
 	"files": [