diff --git a/.changeset/bump-js-yaml-cli-4-3-1.md b/.changeset/bump-js-yaml-cli-4-3-1.md
new file mode 100644
index 0000000000..1d2a875040
--- /dev/null
+++ b/.changeset/bump-js-yaml-cli-4-3-1.md
@@ -0,0 +1,5 @@
+---
+'@tinacms/cli': patch
+---
+
+Bump `js-yaml` to 4.3.1, picking up an upstream security fix (GHSA-5p4m-2wfm-xmqj)
diff --git a/.changeset/bump-js-yaml-graphql-3-15-1.md b/.changeset/bump-js-yaml-graphql-3-15-1.md
new file mode 100644
index 0000000000..c83d51bf02
--- /dev/null
+++ b/.changeset/bump-js-yaml-graphql-3-15-1.md
@@ -0,0 +1,5 @@
+---
+'@tinacms/graphql': patch
+---
+
+Bump `js-yaml` to 3.15.1, picking up an upstream security fix (GHSA-5p4m-2wfm-xmqj)
diff --git a/.changeset/bump-next-auth-4-24-15.md b/.changeset/bump-next-auth-4-24-15.md
new file mode 100644
index 0000000000..f50a9cb621
--- /dev/null
+++ b/.changeset/bump-next-auth-4-24-15.md
@@ -0,0 +1,5 @@
+---
+'tinacms-authjs': patch
+---
+
+Bump `next-auth` to 4.24.15
diff --git a/.changeset/bump-tar-7-5-22.md b/.changeset/bump-tar-7-5-22.md
new file mode 100644
index 0000000000..79172f3ee4
--- /dev/null
+++ b/.changeset/bump-tar-7-5-22.md
@@ -0,0 +1,5 @@
+---
+'create-tina-app': patch
+---
+
+Bump `tar` to 7.5.22
diff --git a/packages/@tinacms/cli/package.json b/packages/@tinacms/cli/package.json
index a01eec4b63..ae3fddaa9a 100644
--- a/packages/@tinacms/cli/package.json
+++ b/packages/@tinacms/cli/package.json
@@ -91,7 +91,7 @@
         "esbuild": "catalog:",
         "fs-extra": "catalog:",
         "graphql": "15.8.0",
-        "js-yaml": "^4.1.0",
+        "js-yaml": "^4.3.1",
         "many-level": "catalog:",
         "memory-level": "catalog:",
         "minimatch": "catalog:",
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 81dec9e2ca..da5327b194 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -601,8 +601,8 @@ catalogs:
       specifier: 4.0.3
       version: 4.0.3
     tar:
-      specifier: 7.5.21
-      version: 7.5.21
+      specifier: 7.5.22
+      version: 7.5.22
     ts-jest:
       specifier: ^29.2.5
       version: 29.4.6
@@ -1438,8 +1438,8 @@ importers:
         specifier: 15.8.0
         version: 15.8.0
       js-yaml:
-        specifier: ^4.1.0
-        version: 4.1.1
+        specifier: ^4.3.1
+        version: 4.3.1
       many-level:
         specifier: 'catalog:'
         version: 2.0.0
@@ -2069,7 +2069,7 @@ importers:
         version: 5.27.14
       tar:
         specifier: 'catalog:'
-        version: 7.5.21
+        version: 7.5.22
     devDependencies:
       '@tinacms/scripts':
         specifier: workspace:*
@@ -12174,6 +12174,10 @@ packages:
     resolution: {integrity: sha512-qQKT4zQxXl8lLwBtHMWwaTcGfFOZviOJet3Oy/xmGk2gZH677CJM9EvtfdSkgWcATZhj/55JZ0rmy3myCT5lsA==}
     hasBin: true
 
+  js-yaml@4.3.1:
+    resolution: {integrity: sha512-CY6crGq313MX8GkwvB7tzgp99vjQxY1++5y10/BKN/GUfHqWaOGQMNZkBvqSzsZKWk/ijwHlWzzkLulsGHhjWQ==}
+    hasBin: true
+
   jsbn@0.1.1:
     resolution: {integrity: sha512-UVU9dibq2JcFWxQPA6KCqj5O42VOmAY3zQUfEKxU0KpTGXwNoCjkX1e13eHNvw/xPynt6pU0rZ1htjWTNTSXsg==}
 
@@ -15147,8 +15151,8 @@ packages:
     resolution: {integrity: sha512-tOG/7GyXpFevhXVh8jOPJrmtRpOTsYqUIkVdVooZYJS/z8WhfQUX8RJILmeuJNinGAMSu1veBr4asSHFt5/hng==}
     engines: {node: '>=18'}
 
-  tar@7.5.21:
-    resolution: {integrity: sha512-XdhtCvlMywwxpCW8YEq3lOXBJpUPTR2OHHcwLPO3HwsJqOHa2Ok/oJ7ruGzp+JrKoRPVCzJwAdEjqLW/vNRPHA==}
+  tar@7.5.22:
+    resolution: {integrity: sha512-MFO/QzvtAOmJbkhOaCTvbGcFN9L9b+JunIsDwaKljSOdcLMea3NJ1k9Usz/rjdfSXTq4dfzfeS7W4p4YOAAHeA==}
     engines: {node: '>=18'}
 
   term-size@2.2.1:
@@ -29396,6 +29400,10 @@ snapshots:
     dependencies:
       argparse: 2.0.1
 
+  js-yaml@4.3.1:
+    dependencies:
+      argparse: 2.0.1
+
   jsbn@0.1.1:
     optional: true
 
@@ -33535,7 +33543,7 @@ snapshots:
       minizlib: 3.1.0
       yallist: 5.0.0
 
-  tar@7.5.21:
+  tar@7.5.22:
     dependencies:
       '@isaacs/fs-minipass': 4.0.1
       chownr: 3.0.0
diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml
index 538e735876..1dd8830667 100644
--- a/pnpm-workspace.yaml
+++ b/pnpm-workspace.yaml
@@ -246,7 +246,7 @@ catalog:
     stopword: ^3.1.4
     stringify-entities: 4.0.3
     tailwindcss-animate: ^1.0.7
-    tar: 7.5.21
+    tar: 7.5.22
     ts-jest: ^29.2.5
     ts-node: ^10.9.2
     tsc-alias: ^1.8.10