diff --git a/composer.json b/composer.json
index 0adb3d2..e466806 100644
--- a/composer.json
+++ b/composer.json
@@ -14,7 +14,7 @@
     "minimum-stability": "dev",
     "require": {
         "php": "^8.3",
-        "league/csv": "^9",
+        "league/csv": "^9.18",
         "silverstripe/framework": "^6",
         "symbiote/silverstripe-queuedjobs": "^6"
     },