diff --git a/requirements.txt b/requirements.txt
index 3216958..d69b7dc 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -35,4 +35,5 @@ httpx[http2]
 # a2a (unofficial, stub if not on PyPI)
 # For any additional plugins (add as needed)
 # Add other packages here as you expand functionality
-# supabase_py_vault removed: not on PyPI
\ No newline at end of file
+# supabase_py_vault removed: not on PyPI
+aiohttp>=3.12.14 # not directly required, pinned by Snyk to avoid a vulnerability
\ No newline at end of file