diff --git a/crates/goose-cli/Cargo.toml b/crates/goose-cli/Cargo.toml
index e8dbfd4b..b0666212 100644
--- a/crates/goose-cli/Cargo.toml
+++ b/crates/goose-cli/Cargo.toml
@@ -48,7 +48,7 @@ shlex = "1.3.0"
 async-trait = { workspace = true }
 base64 = { workspace = true }
 regex = { workspace = true }
-tar = "0.4"
+tar = "0.4.45"
 reqwest = { workspace = true, features = ["blocking", "rustls"], default-features = false }
 zip = { workspace = true }
 bzip2 = "0.5"