diff --git a/requirements/base.txt b/requirements/base.txt
index a09bde86..35aa291d 100644
--- a/requirements/base.txt
+++ b/requirements/base.txt
@@ -144,3 +144,4 @@ pymisp==2.4.184.2
 # https://github.com/python-ldap/python-ldap
 python-ldap==3.4.4
 django-auth-ldap==4.6.0
+aiohttp>=3.9.2 # not directly required, pinned by Snyk to avoid a vulnerability