diff --git a/Cargo.lock b/Cargo.lock
index a11f1e8103..c475fe3a54 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -2897,9 +2897,9 @@ dependencies = [
 
 [[package]]
 name = "tar"
-version = "0.4.45"
+version = "0.4.46"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "22692a6476a21fa75fdfc11d452fda482af402c008cdbaf3476414e122040973"
+checksum = "3f6221d9a6003c78398e3b239969f352578258df48c8eb051caadae0015bc840"
 dependencies = [
  "filetime",
  "libc",
diff --git a/crates/pyrefly_bundled/Cargo.toml b/crates/pyrefly_bundled/Cargo.toml
index 19b6e78c97..484bf07722 100644
--- a/crates/pyrefly_bundled/Cargo.toml
+++ b/crates/pyrefly_bundled/Cargo.toml
@@ -12,10 +12,10 @@ build = "build.rs"
 [dependencies]
 anyhow = "1.0.102"
 starlark_map = "0.14.2"
-tar = "0.4.45"
+tar = "0.4.46"
 zstd = "0.13"
 
 [build-dependencies]
 sha2 = "0.10.6"
-tar = "0.4.45"
+tar = "0.4.46"
 zstd = { version = "0.13.3", features = ["experimental", "zstdmt"] }
diff --git a/pyrefly_wasm/Cargo.toml b/pyrefly_wasm/Cargo.toml
index 74bcd5310c..87f3c0aa47 100644
--- a/pyrefly_wasm/Cargo.toml
+++ b/pyrefly_wasm/Cargo.toml
@@ -11,7 +11,7 @@ path = "lib.rs"
 crate-type = ["cdylib", "rlib"]
 
 [build-dependencies]
-tar = "0.4.44"
+tar = "0.4.46"
 zstd = { version = "0.13" }
 
 [dependencies]