diff --git a/package-lock.json b/package-lock.json
index 5e0c26c224a..c52c2a5bcec 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -8805,9 +8805,9 @@
       }
     },
     "node_modules/tar-fs": {
-      "version": "3.0.5",
-      "resolved": "https://registry.npmjs.org/tar-fs/-/tar-fs-3.0.5.tgz",
-      "integrity": "sha512-JOgGAmZyMgbqpLwct7ZV8VzkEB6pxXFBVErLtb+XCOqzc6w1xiWKI9GVd6bwk68EX7eJ4DWmfXVmq8K2ziZTGg==",
+      "version": "3.0.6",
+      "resolved": "https://registry.npmjs.org/tar-fs/-/tar-fs-3.0.6.tgz",
+      "integrity": "sha512-iokBDQQkUyeXhgPYaZxmczGPhnhXZ0CmrqI+MOb/WFGS9DW5wnfrLgtjUJBvz50vQ3qfRwJ62QVoCFu8mPVu5w==",
       "dependencies": {
         "pump": "^3.0.0",
         "tar-stream": "^3.1.5"
@@ -9829,9 +9829,9 @@
       "dev": true
     },
     "node_modules/ws": {
-      "version": "8.16.0",
-      "resolved": "https://registry.npmjs.org/ws/-/ws-8.16.0.tgz",
-      "integrity": "sha512-HS0c//TP7Ina87TfiPUz1rQzMhHrl/SG2guqRcTOIUYD2q8uhUdNHZYJUaQ8aTGPzCh+c6oawMKW35nFl1dxyQ==",
+      "version": "8.17.0",
+      "resolved": "https://registry.npmjs.org/ws/-/ws-8.17.0.tgz",
+      "integrity": "sha512-uJq6108EgZMAl20KagGkzCKfMEjxmKvZHG7Tlq0Z6nOky7YF7aq4mOx6xK8TJ/i1LeK4Qus7INktacctDgY8Ow==",
       "engines": {
         "node": ">=10.0.0"
       },
@@ -9989,7 +9989,7 @@
         "progress": "2.0.3",
         "proxy-agent": "6.4.0",
         "semver": "7.6.0",
-        "tar-fs": "3.0.5",
+        "tar-fs": "3.0.6",
         "unbzip2-stream": "1.4.3",
         "yargs": "17.7.2"
       },
@@ -12263,7 +12263,7 @@
         "chromium-bidi": "0.5.19",
         "debug": "4.3.4",
         "devtools-protocol": "0.0.1273771",
-        "ws": "8.16.0"
+        "ws": "8.17.0"
       },
       "devDependencies": {
         "@types/debug": "4.1.12",
@@ -12377,7 +12377,7 @@
       "license": "Apache-2.0",
       "dependencies": {
         "mime": "3.0.0",
-        "ws": "8.16.0"
+        "ws": "8.17.0"
       },
       "devDependencies": {
         "@types/mime": "3.0.4"
diff --git a/packages/browsers/package.json b/packages/browsers/package.json
index 548560624dd..1b2b98964af 100644
--- a/packages/browsers/package.json
+++ b/packages/browsers/package.json
@@ -99,7 +99,7 @@
     "extract-zip": "2.0.1",
     "progress": "2.0.3",
     "proxy-agent": "6.4.0",
-    "tar-fs": "3.0.5",
+    "tar-fs": "3.0.6",
     "unbzip2-stream": "1.4.3",
     "yargs": "17.7.2",
     "semver": "7.6.0"
diff --git a/packages/puppeteer-core/package.json b/packages/puppeteer-core/package.json
index 2e7aa6a338c..92a8e4b33f3 100644
--- a/packages/puppeteer-core/package.json
+++ b/packages/puppeteer-core/package.json
@@ -123,7 +123,7 @@
     "chromium-bidi": "0.5.19",
     "debug": "4.3.4",
     "devtools-protocol": "0.0.1273771",
-    "ws": "8.16.0"
+    "ws": "8.17.0"
   },
   "devDependencies": {
     "@types/debug": "4.1.12",
diff --git a/packages/testserver/package.json b/packages/testserver/package.json
index a3a7ac71481..198b27b714d 100644
--- a/packages/testserver/package.json
+++ b/packages/testserver/package.json
@@ -28,7 +28,7 @@
   "license": "Apache-2.0",
   "dependencies": {
     "mime": "3.0.0",
-    "ws": "8.16.0"
+    "ws": "8.17.0"
   },
   "devDependencies": {
     "@types/mime": "3.0.4"