diff --git a/deps.edn b/deps.edn
index 545315a..b4b7e90 100644
--- a/deps.edn
+++ b/deps.edn
@@ -4,7 +4,7 @@
         clansi/clansi {:mvn/version "1.0.0"}
         org.clojure/data.json {:mvn/version "2.5.0"}
         org.slf4j/slf4j-simple {:mvn/version "2.0.10"}
-        org.owasp/dependency-check-core {:mvn/version "9.0.8"}
+        org.owasp/dependency-check-core {:mvn/version "12.1.0"}
         rm-hull/table {:mvn/version "0.7.1"}
         trptcolin/versioneer {:mvn/version "0.2.0"}}
  :mvn/repos {"central" {:url "https://repo1.maven.org/maven2/"}
diff --git a/project.clj b/project.clj
index d520b1f..d67788c 100644
--- a/project.clj
+++ b/project.clj
@@ -7,7 +7,7 @@
                  [clansi "1.0.0"]
                  [org.clojure/data.json "2.5.0"]
                  [org.slf4j/slf4j-simple "2.0.10"]
-                 [org.owasp/dependency-check-core "9.0.8"]
+                 [org.owasp/dependency-check-core "12.1.0"]
                  [rm-hull/table "0.7.1"]
                  [trptcolin/versioneer "0.2.0"]
                  ;; Explicitly depend on a certain Jackson, consistently.
diff --git a/src/nvd/config.clj b/src/nvd/config.clj
index 9e5d680..f22939f 100644
--- a/src/nvd/config.clj
+++ b/src/nvd/config.clj
@@ -30,7 +30,7 @@
   (:import
    (java.io File)
    (org.owasp.dependencycheck Engine)
-   (org.owasp.dependencycheck.utils Settings Settings$KEYS)))
+   (org.owasp.dependencycheck.utils Downloader Settings Settings$KEYS)))
 
 (def ^:private string-mappings
   {Settings$KEYS/ANALYZER_NEXUS_URL        [:analyzer :nexus-url]
@@ -209,6 +209,8 @@ You can pass an empty string for an .edn file to be automatically created."
 
         (.setString settings Settings$KEYS/NVD_API_KEY api-key)))
 
+    (.configure (Downloader/getInstance) settings)
+
     (-> project
         (assoc-in [:nvd :data-directory] (.getDataDirectory settings))
         (assoc :engine      (Engine. settings)