diff --git a/datafiles/formats.py b/datafiles/formats.py
index 0ea5c09..3d5660c 100644
--- a/datafiles/formats.py
+++ b/datafiles/formats.py
@@ -104,7 +104,7 @@ def deserialize(cls, file_object):
         yaml = _YAML()
         yaml.preserve_quotes = True  # type: ignore
         try:
-            return yaml.load(file_object)
+            return yaml.safe_load(file_object)
         except NotImplementedError as e:
             log.error(str(e))
             return {}