diff --git a/fdroidserver/metadata.py b/fdroidserver/metadata.py
index 8c9aa6d7..d652bee5 100644
--- a/fdroidserver/metadata.py
+++ b/fdroidserver/metadata.py
@@ -1021,7 +1021,7 @@ def parse_json_metadata(mf, app):
 
 
 def parse_yaml_metadata(mf, app):
-    yamldata = yaml.load(mf, Loader=YamlLoader)
+    yamldata = yaml.safe_load(mf)
     if yamldata:
         app.update(yamldata)
     return app