diff --git a/build.gradle b/build.gradle
index c87d744..d6466be 100755
--- a/build.gradle
+++ b/build.gradle
@@ -31,6 +31,10 @@ dependencies {
             'org.springframework.boot:spring-boot-starter-actuator',
             'org.springframework.boot:spring-boot-starter-validation',
 
+            // We only use snakeyaml transitively, but we want to force the
+            // current version due to existing CVEs.
+            'org.yaml:snakeyaml:2.0',
+
             'org.apache.commons:commons-text:1.10.0',
             'org.influxdb:influxdb-java'
     )