diff --git a/package.json b/package.json
index 937dd85..d1a2e09 100644
--- a/package.json
+++ b/package.json
@@ -27,7 +27,7 @@
   "exports": "./index.js",
   "types": "./index.d.ts",
   "dependencies": {
-    "careful-downloader": "^1.3.0",
+    "careful-downloader": "^1.3.1",
     "chalk": "^4.1.2",
     "read-pkg-up": "^8.0.0"
   },
diff --git a/yarn.lock b/yarn.lock
index 8a64d69..3b01f21 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -399,14 +399,15 @@ caniuse-lite@^1.0.30001251, caniuse-lite@^1.0.30001264:
   resolved "https://registry.yarnpkg.com/caniuse-lite/-/caniuse-lite-1.0.30001265.tgz#0613c9e6c922e422792e6fcefdf9a3afeee4f8c3"
   integrity sha512-YzBnspggWV5hep1m9Z6sZVLOt7vrju8xWooFAgN6BA5qvy98qPAPb7vNUzypFaoh2pb3vlfzbDO8tB57UPGbtw==
 
-careful-downloader@^1.3.0:
-  version "1.3.0"
-  resolved "https://registry.yarnpkg.com/careful-downloader/-/careful-downloader-1.3.0.tgz#8e04bcef656deb877ea915dcfe51447d8ca0f5d5"
-  integrity sha512-ayBd5Mkf2fp0xC394Tx1vGr0ETPVLVKq4E5kOukzjCbgv0IaghSraGM6bO5OHeBAnXZuCq9u/9VndmCCXjAnMg==
+careful-downloader@^1.3.1:
+  version "1.3.1"
+  resolved "https://registry.yarnpkg.com/careful-downloader/-/careful-downloader-1.3.1.tgz#885452db0fdeb0cc4c178d6fc348203a41779de2"
+  integrity sha512-22B44PheR54zFdxB9PP1h4yNhZap/3E9bWom8PBxUCGgW93kg8rbjZn4kGjVH9FXsIvgcGrrVq6BYwawmMwz1w==
   dependencies:
     decompress "^4.2.1"
     fs-extra "^10.0.0"
     got "^11.8.2"
+    is-path-in-cwd "^4.0.0"
     sumchecker "^3.0.1"
     tempy "^2.0.0"
     url-parse "^1.5.3"
@@ -1372,11 +1373,23 @@ is-path-cwd@^2.2.0:
   resolved "https://registry.yarnpkg.com/is-path-cwd/-/is-path-cwd-2.2.0.tgz#67d43b82664a7b5191fd9119127eb300048a9fdb"
   integrity sha512-w942bTcih8fdJPJmQHFzkS76NEP8Kzzvmw92cXsazb8intwLqPibPPdXf4ANdKV3rYMuuQYGIWtvz9JilB3NFQ==
 
+is-path-in-cwd@^4.0.0:
+  version "4.0.0"
+  resolved "https://registry.yarnpkg.com/is-path-in-cwd/-/is-path-in-cwd-4.0.0.tgz#e5a97a09cf34655d7bab7204e6c3997d834ef0b6"
+  integrity sha512-FjDhtYysbIKBKRFCQN8NcMaHHWfwAzJLOrRAhzd4hnK6Y1979p6ZthIUqdPjCyAk5jvrmY2fn56Y+kFE8RdsrA==
+  dependencies:
+    is-path-inside "^4.0.0"
+
 is-path-inside@^3.0.2:
   version "3.0.3"
   resolved "https://registry.yarnpkg.com/is-path-inside/-/is-path-inside-3.0.3.tgz#d231362e53a07ff2b0e0ea7fed049161ffd16283"
   integrity sha512-Fd4gABb+ycGAmKou8eMftCupSir5lRxqf4aD/vd0cD2qc4HL07OjCeuHMr8Ro4CoMaeCKDB0/ECBOVWjTwUvPQ==
 
+is-path-inside@^4.0.0:
+  version "4.0.0"
+  resolved "https://registry.yarnpkg.com/is-path-inside/-/is-path-inside-4.0.0.tgz#805aeb62c47c1b12fc3fd13bfb3ed1e7430071db"
+  integrity sha512-lJJV/5dYS+RcL8uQdBDW9c9uWFLLBNRyFhnAKXw5tVqLlKZ4RMGZKv+YQ/IA3OhD+RpbJa1LLFM1FQPGyIXvOA==
+
 is-plain-obj@^2.1.0:
   version "2.1.0"
   resolved "https://registry.yarnpkg.com/is-plain-obj/-/is-plain-obj-2.1.0.tgz#45e42e37fccf1f40da8e5f76ee21515840c09287"