diff --git a/.changeset/curvy-pears-yawn.md b/.changeset/curvy-pears-yawn.md
new file mode 100644
index 0000000000..afbae92d3b
--- /dev/null
+++ b/.changeset/curvy-pears-yawn.md
@@ -0,0 +1,5 @@
+---
+"create-react-router": patch
+---
+
+Update `tar-fs`
diff --git a/packages/create-react-router/package.json b/packages/create-react-router/package.json
index 72b2e698b0..dad0e3747c 100644
--- a/packages/create-react-router/package.json
+++ b/packages/create-react-router/package.json
@@ -49,7 +49,7 @@
     "sisteransi": "^1.0.5",
     "sort-package-json": "^1.55.0",
     "strip-ansi": "^6.0.1",
-    "tar-fs": "^2.1.1"
+    "tar-fs": "^2.1.3"
   },
   "devDependencies": {
     "@types/gunzip-maybe": "^1.4.0",
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index ede64bc30d..9912dcde94 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -698,8 +698,8 @@ importers:
         specifier: ^6.0.1
         version: 6.0.1
       tar-fs:
-        specifier: ^2.1.1
-        version: 2.1.1
+        specifier: ^2.1.3
+        version: 2.1.3
     devDependencies:
       '@types/gunzip-maybe':
         specifier: ^1.4.0
@@ -8364,8 +8364,8 @@ packages:
     engines: {node: '>=14.0.0'}
     hasBin: true
 
-  tar-fs@2.1.1:
-    resolution: {integrity: sha512-V0r2Y9scmbDRLCNex/+hYzvp/zyYjvFbHPNgVTKfQvVrb6guiE/fxP+XblDNR011utopbkex2nM4dHNV6GDsng==}
+  tar-fs@2.1.3:
+    resolution: {integrity: sha512-090nwYJDmlhwFwEW3QQl+vaNnxsO2yVsd45eTKRBzSzu+hlb1w2K9inVq5b0ngXuLVqQ4ApvsUHHnu/zQNkWAg==}
 
   tar-stream@2.2.0:
     resolution: {integrity: sha512-ujeqbceABgwMZxEJnk2HDY2DlnUZ+9oEcb1KzTVfYHio0UE6dG71n60d8D2I4qNvleWrrXpmjpt7vZeF1LnMZQ==}
@@ -17380,7 +17380,7 @@ snapshots:
     transitivePeerDependencies:
       - ts-node
 
-  tar-fs@2.1.1:
+  tar-fs@2.1.3:
     dependencies:
       chownr: 1.1.4
       mkdirp-classic: 0.5.3