diff --git a/magic/requirements.txt b/magic/requirements.txt
index b745c18..cc54c1b 100644
--- a/magic/requirements.txt
+++ b/magic/requirements.txt
@@ -1,2 +1,3 @@
 awswrangler
 pyarrow
+aiohttp>=3.10.11 # not directly required, pinned by Snyk to avoid a vulnerability