diff --git a/jbrowse/package-lock.json b/jbrowse/package-lock.json
index 044b5e267..d96fa658b 100644
--- a/jbrowse/package-lock.json
+++ b/jbrowse/package-lock.json
@@ -10851,7 +10851,9 @@
       }
     },
     "node_modules/tar-fs": {
-      "version": "2.1.1",
+      "version": "2.1.2",
+      "resolved": "https://registry.npmjs.org/tar-fs/-/tar-fs-2.1.2.tgz",
+      "integrity": "sha512-EsaAXwxmx8UB7FRKqeozqEPop69DXcmYwTQwXvyAPF352HJsPdkVhvTaDPYqfNgruveJIJy3TA2l+2zj8LJIJA==",
       "license": "MIT",
       "dependencies": {
         "chownr": "^1.1.1",