diff --git a/build.sbt b/build.sbt
index 4bf9b3663e..ffc3de4233 100644
--- a/build.sbt
+++ b/build.sbt
@@ -165,7 +165,10 @@ lazy val thrall = playProject("thrall", 9002)
     ),
     // amazon-kinesis-client 2.6.0 brings in a critically vulnerable version of apache avro,
     // but we cannot upgrade amazon-kinesis-client further without performing the v2->v3 upgrade https://docs.aws.amazon.com/streams/latest/dev/kcl-migration-from-2-3.html
-    dependencyOverrides += "org.apache.avro" % "avro" % "1.11.4"
+    dependencyOverrides ++= Seq(
+      "org.apache.avro" % "avro" % "1.11.4",
+      "org.apache.pekko" %% "pekko-stream" % "1.0.3"
+    )
   )
 
 lazy val usage = playProject("usage", 9009).settings(