diff --git a/requirements/common.in b/requirements/common.in
index c2f25c57d1..00a15834d1 100644
--- a/requirements/common.in
+++ b/requirements/common.in
@@ -193,3 +193,6 @@ django-sendfile==0.3.11
 
 # For checking whether email of the user is from a disposable email provider.
 disposable-email-domains==0.0.28
+
+# Needed for parsing YAML with JSON references from the REST API spec files
+yamole==2.1.1
diff --git a/requirements/dev.txt b/requirements/dev.txt
index 130da26422..4089c5611e 100644
--- a/requirements/dev.txt
+++ b/requirements/dev.txt
@@ -134,7 +134,7 @@ python-ldap==3.0.0        # via django-auth-ldap, pyldap
 python-twitter==3.4.1
 python3-openid==3.1.0     # via social-auth-core
 pytz==2018.4
-pyyaml==3.12              # via pyaml
+pyyaml==3.12              # via pyaml, yamole
 qrcode==4.0.4             # via django-two-factor-auth
 queuelib==1.4.2           # via scrapy
 recommonmark==0.4.0
@@ -180,4 +180,5 @@ websocket-client==0.44.0  # via docker
 werkzeug==0.12.2          # via moto
 wrapt==1.10.11            # via aws-xray-sdk
 xmltodict==0.11.0         # via moto
+yamole==2.1.1
 zope.interface==4.4.3     # via twisted
diff --git a/requirements/prod.txt b/requirements/prod.txt
index 9a6a2b1a09..ad166025de 100644
--- a/requirements/prod.txt
+++ b/requirements/prod.txt
@@ -96,6 +96,7 @@ python-ldap==3.0.0        # via django-auth-ldap
 python-twitter==3.4.1
 python3-openid==3.1.0     # via social-auth-core
 pytz==2018.4
+pyyaml==3.12              # via yamole
 qrcode==4.0.4             # via django-two-factor-auth
 redis==2.10.6
 regex==2017.11.9
@@ -121,3 +122,4 @@ urllib3==1.22             # via requests
 uwsgi==2.0.17
 virtualenv-clone==0.3.0
 wcwidth==0.1.7            # via prompt-toolkit
+yamole==2.1.1