diff --git a/requirements-to-freeze.txt b/requirements-to-freeze.txt
index 748b2b7..2e61280 100644
--- a/requirements-to-freeze.txt
+++ b/requirements-to-freeze.txt
@@ -14,3 +14,4 @@ python-dotenv
 # development
 flake8
 black
+aiohttp>=3.9.4 # not directly required, pinned by Snyk to avoid a vulnerability