diff --git a/requirements.txt b/requirements.txt
index 5253a3e8..5fac4557 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -54,7 +54,7 @@ snakefood
 gevent==1.4.0
 redis==2.10.6
 # previous 3.11 has a security issue, which is fixed in at least 4.2b1
-PyYAML==4.2b4
+PyYAML==5.4
 
 # MySQLdb
 MySQL-python==1.2.5