diff --git a/snap.cabal b/snap.cabal
--- a/snap.cabal
+++ b/snap.cabal
@@ -1,5 +1,5 @@
 name:           snap
-version:        0.13.2.6
+version:        0.13.2.7
 synopsis:       Top-level package for the Snap Web Framework
 description:
     This is the top-level package for the official Snap Framework libraries.
@@ -144,8 +144,9 @@
 
   build-depends:
     MonadCatchIO-transformers >= 0.2      && < 0.4,
-    aeson                     >= 0.6      && < 0.8,
-    attoparsec                >= 0.10     && < 0.12,
+    -- Blacklist aeson versions with problems from lack of upper bounds
+    aeson                     (>= 0.6 && < 0.7) || (>= 0.7.0.4 && < 0.8),
+    attoparsec                >= 0.10     && < 0.13,
     bytestring                >= 0.9.1    && < 0.11,
     cereal                    >= 0.3      && < 0.5,
     clientsession             >= 0.8      && < 0.10,
diff --git a/test/snap-testsuite.cabal b/test/snap-testsuite.cabal
--- a/test/snap-testsuite.cabal
+++ b/test/snap-testsuite.cabal
@@ -18,16 +18,16 @@
     blaze-builder              >= 0.3      && < 0.4,
     http-streams               >= 0.4.0.1  && < 0.8,
     process                    == 1.*,
-    smallcheck                 >= 0.6      && < 1.1,
+    smallcheck                 >= 0.6      && < 1.2,
     test-framework             >= 0.6      && < 0.9,
     test-framework-hunit       >= 0.2.7    && < 0.4,
     test-framework-quickcheck2 >= 0.2.12.1 && < 0.4,
     test-framework-smallcheck  >= 0.1      && < 0.3,
-    unix                       >= 2.2.0.0  && < 2.7,
+    unix                       >= 2.2.0.0  && < 2.8,
 
     MonadCatchIO-transformers  >= 0.2      && < 0.4,
     aeson                      >= 0.6      && < 0.8,
-    attoparsec                 >= 0.10     && < 0.12,
+    attoparsec                 >= 0.10     && < 0.13,
     bytestring                 >= 0.9.1    && < 0.11,
     cereal                     >= 0.3      && < 0.5,
     clientsession              >= 0.8      && < 0.10,
@@ -99,7 +99,7 @@
   build-depends:
     MonadCatchIO-transformers  >= 0.2      && < 0.4,
     aeson                      >= 0.6      && < 0.8,
-    attoparsec                 >= 0.10     && < 0.12,
+    attoparsec                 >= 0.10     && < 0.13,
     bytestring                 >= 0.9.1    && < 0.11,
     cereal                     >= 0.3      && < 0.5,
     clientsession              >= 0.8      && < 0.10,
@@ -172,16 +172,16 @@
     QuickCheck                 >= 2.3.0.2,
     http-streams               >= 0.4.0.1  && < 0.8,
     process                    == 1.*,
-    smallcheck                 >= 0.6      && < 1.1,
+    smallcheck                 >= 0.6      && < 1.2,
     test-framework             >= 0.6      && < 0.9,
     test-framework-hunit       >= 0.2.7    && < 0.4,
     test-framework-quickcheck2 >= 0.2.12.1 && < 0.4,
     test-framework-smallcheck  >= 0.1      && < 0.3,
-    unix                       >= 2.2.0.0  && < 2.7,
+    unix                       >= 2.2.0.0  && < 2.8,
 
     MonadCatchIO-transformers  >= 0.2      && < 0.4,
     aeson                      >= 0.6      && < 0.8,
-    attoparsec                 >= 0.10     && < 0.12,
+    attoparsec                 >= 0.10     && < 0.13,
     bytestring                 >= 0.9.1    && < 0.11,
     cereal                     >= 0.3      && < 0.5,
     clientsession              >= 0.8      && < 0.10,