diff --git a/CHANGELOG.md b/CHANGELOG.md
index 8f3b9a1a0..f32253969 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -15,6 +15,7 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
 
 - fixed empty lines for ZyXEL GS1900 switches (@jluebbe)
 - fixed prompt for Watchguard FirewareOS not matching the regex when the node is non-master (@netdiver)
+- defined 'psych' runtime dependency to resolve 'unsafe_load' error during startup (@MattKobayashi)
 - fixed new date/time format with newer RouterOS `# jun/01/2023 12:11:25 by RouterOS 7.9.1` vs `# 2023-06-01 12:16:16 by RouterOS 7.10rc1` (@tim427)
 - Do not redirect stderr when fetching opnsense version since default shell (csh) doesn't support it (@spike77453)
 
diff --git a/oxidized.gemspec b/oxidized.gemspec
index d6afa7053..aa15134df 100644
--- a/oxidized.gemspec
+++ b/oxidized.gemspec
@@ -26,6 +26,7 @@ Gem::Specification.new do |s|
   s.add_runtime_dependency 'ed25519',      '~> 1.2'
   s.add_runtime_dependency 'net-ssh',      '~> 7.1'
   s.add_runtime_dependency 'net-telnet',   '~> 0.2'
+  s.add_runtime_dependency 'psych',        '~> 3.3.2'
   s.add_runtime_dependency 'rugged',       '~> 1.6'
   s.add_runtime_dependency 'slop',         '~> 4.6'