diff --git a/osv-scanner.toml b/osv-scanner.toml
index cc12c45a7e8..df571fdefca 100644
--- a/osv-scanner.toml
+++ b/osv-scanner.toml
@@ -1,41 +1,6 @@
 
 
 
-[[IgnoredVulns]]
-id = "GHSA-8qq5-rm4j-mr97"
-reason = "tar extraction CVE (symlink/hardlink on untar); scoped to lerna's nested tar@6.2.1 only (resolutions carve-out: lerna 9's packDirectory requires tar 6 — tar 7 has no CJS default export and crashes lerna publish, see runs 36816624921/36817983431); lerna only CREATES tarballs from repo files, never extracts untrusted archives"
-
-[[IgnoredVulns]]
-id = "GHSA-r6q2-hw4h-h46w"
-reason = "tar extraction CVE; scoped to lerna's nested tar@6.2.1 (carve-out for lerna 9 packDirectory compatibility); our usage is archive PACKING only, not extraction"
-
-[[IgnoredVulns]]
-id = "GHSA-34x7-hfp2-rc4v"
-reason = "tar extraction CVE (specially crafted archives); scoped to lerna's nested tar@6.2.1 (carve-out for lerna 9 packDirectory compatibility); our usage is limited to archive PACKING only"
-
-[[IgnoredVulns]]
-id = "GHSA-83g3-92jg-28cx"
-reason = "tar extraction CVE (specially crafted archives); scoped to lerna's nested tar@6.2.1 (carve-out for lerna 9 packDirectory compatibility); our usage is limited to archive PACKING only"
-
-[[IgnoredVulns]]
-id = "GHSA-qffp-2rhf-9h96"
-reason = "tar hardlink path traversal (crafted archives); scoped to lerna's nested tar@6.2.1 (forcing tar 7.x into lerna breaks packDirectory, same constraint as GHSA-8qq5-rm4j-mr97); our usage is archive PACKING only"
-
-[[IgnoredVulns]]
-id = "GHSA-9ppj-qmqm-q256"
-reason = "tar extraction CVE (same risk profile as other tar exclusions); scoped to lerna's nested tar@6.2.1; we only use tar for packing; security exception previously approved (HSM-429 history)"
-
-[[IgnoredVulns]]
-id = "GHSA-23hp-3jrh-7fpw"
-reason = "tar decompression/parse DoS via unlimited input; scoped to lerna's nested tar@6.2.1 (fix only in tar 7.5.19+ which breaks lerna packDirectory, same constraint as GHSA-8qq5-rm4j-mr97); lerna never extracts untrusted archives"
-
-[[IgnoredVulns]]
-id = "GHSA-8x88-c5mf-7j5w"
-reason = "tar infinite loop via negative entry size; scoped to lerna's nested tar@6.2.1 (fix only in tar 7.5.18+ which breaks lerna packDirectory, same constraint as GHSA-8qq5-rm4j-mr97); our usage is archive PACKING only"
-
-[[IgnoredVulns]]
-id = "GHSA-r292-9mhp-454m"
-reason = "tar stack-overflow DoS in tar.x()/tar.t() member-selection filtering; scoped to lerna's nested tar@6.2.1 (fix only in tar 7.5.21+ which breaks lerna packDirectory, same constraint as GHSA-8qq5-rm4j-mr97); lerna packs repo-controlled files only"
 
 [[IgnoredVulns]]
 id = "GHSA-3ppc-4f35-3m26"
diff --git a/package.json b/package.json
index e59c379c0b1..4d48aadfc7d 100644
--- a/package.json
+++ b/package.json
@@ -119,7 +119,6 @@
     "bignumber.js": "9.1.2",
     "form-data": "^4.0.4",
     "ws": "8.22.0",
-    "**/swarm-js/**/tar": "6.2.1",
     "serialize-javascript": "7.0.5",
     "@grpc/grpc-js": "^1.14.4",
     "bigint-buffer": "npm:@trufflesuite/bigint-buffer@1.1.10",
@@ -278,9 +277,6 @@
     "avalanche": {
       "store2": "2.14.4"
     },
-    "swarm-js": {
-      "tar": "6.2.1"
-    },
     "iota-sdk": {
       "valibot": "1.2.0"
     },