tar (node-tar) < 7.5.7 has a security vulnerability

I use @tensorflow/tfjs-node in a project and it calls for a vulnerable version of tar:

https://github.com/tensorflow/tfjs/blob/0fc04d958ea592f3b8db79a8b3b497b5c8904097/tfjs-node/package.json#L71

Would it be possible to release a new version with an updated dependency?

CVE-2026-24842