diff --git a/package.json b/package.json
index 9a804d0..9e06eec 100644
--- a/package.json
+++ b/package.json
@@ -3,7 +3,7 @@
   "description": "a vulnerable node app for demos",
   "version": "0.0.1",
   "dependencies": {
-    "js-yaml": "<2.0.5",
+    "js-yaml": "2.1.3",
     "connect": ">3.0.0",
     "serve-static": ">0.0.0",
     "finalhandler": ">0.0.0",