diff --git a/package.json b/package.json
index 98d5bf4..339ca20 100644
--- a/package.json
+++ b/package.json
@@ -7,6 +7,6 @@
   "license": "GPL-3.0-only",
   "dependencies": {
     "Mapboxgljs.LayerViewer": "https://github.com/cyclestreets/Mapboxgljs.LayerViewer/",
-    "osmtogeojson": "^3.0.0-beta.5"
+    "osmtogeojson": "https://github.com/tyrasd/osmtogeojson#snyk-fix-65371a4c4920389f7e5127c141088511"
   }
 }
diff --git a/yarn.lock b/yarn.lock
index 3554814..e7869c8 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -120,10 +120,10 @@
   resolved "https://registry.yarnpkg.com/@types/geojson/-/geojson-7946.0.14.tgz#319b63ad6df705ee2a65a73ef042c8271e696613"
   integrity sha512-WCfD5Ht3ZesJUsONdhvm84dmzWOiOzOAqOncN0++w0lBw1o8OuDNJF2McvvCef/yBqb/HYRahp1BYtODFQ8bRg==
 
-"@xmldom/xmldom@0.8.3":
-  version "0.8.3"
-  resolved "https://registry.yarnpkg.com/@xmldom/xmldom/-/xmldom-0.8.3.tgz#beaf980612532aa9a3004aff7e428943aeaa0711"
-  integrity sha512-Lv2vySXypg4nfa51LY1nU8yDAGo/5YwF+EY/rUZgIbfvwVARcd67ttCM8SMsTeJy51YhHYavEq+FS6R0hW9PFQ==
+"@xmldom/xmldom@0.8.4":
+  version "0.8.4"
+  resolved "https://registry.yarnpkg.com/@xmldom/xmldom/-/xmldom-0.8.4.tgz#05b76034d3e09d4b9d309d9b862994de23e7687d"
+  integrity sha512-JIsjTbWBWJHb2t1D4UNZIJ6ohlRYCdoGzeHSzTorMH2zOq3UKlSBzFBMBdFK3xnUD/ANHw/SUzl/vx0z0JrqRw==
 
 JSONStream@0.8.0:
   version "0.8.0"
@@ -421,13 +421,12 @@ osm-polygon-features@^0.9.1:
   resolved "https://registry.yarnpkg.com/osm-polygon-features/-/osm-polygon-features-0.9.2.tgz#20ae41130c486e49a3b2a3c2b58a1419c4986778"
   integrity sha512-5zNEFCq+G6X2TDkqbKYLF1+GtWVCCLA8zX+FVhSogsiTRsGquyaGRy5cYNW4BE3ci0MKOLvNTkFNsjsCNtgz0A==
 
-osmtogeojson@^3.0.0-beta.5:
+"osmtogeojson@https://github.com/tyrasd/osmtogeojson#snyk-fix-65371a4c4920389f7e5127c141088511":
   version "3.0.0-beta.5"
-  resolved "https://registry.yarnpkg.com/osmtogeojson/-/osmtogeojson-3.0.0-beta.5.tgz#c58ed8e4fb3a82a41cf3f00cbe79991e17e028b6"
-  integrity sha512-izvaUWnunrYvMB4LB0ZN15O1+g90c628yHS4SeSR3daVSBF9vdTHL7iVHfg0wEr1uEYjQ+lMJHCiYFusL5yKVg==
+  resolved "https://github.com/tyrasd/osmtogeojson#555a559ab0409d24b59d245d704889f6238133ca"
   dependencies:
     "@mapbox/geojson-rewind" "0.5.2"
-    "@xmldom/xmldom" "0.8.3"
+    "@xmldom/xmldom" "0.8.4"
     JSONStream "0.8.0"
     concat-stream "2.0.0"
     geojson-numeric "0.2.1"