diff --git a/twitter-sentiment-processor/demos/py-demo/processor/requirements.txt b/twitter-sentiment-processor/demos/py-demo/processor/requirements.txt
index 11b8e391..4bd6cc87 100644
--- a/twitter-sentiment-processor/demos/py-demo/processor/requirements.txt
+++ b/twitter-sentiment-processor/demos/py-demo/processor/requirements.txt
@@ -1,3 +1,4 @@
 azure-ai-textanalytics >= 5.1.0b2
 dapr-ext-grpc >= 1.0.0
 dapr >= 1.0.0
+aiohttp>=3.9.4 # not directly required, pinned by Snyk to avoid a vulnerability