diff --git a/pub_sub/python/sdk/order-processor-fastapi/requirements.txt b/pub_sub/python/sdk/order-processor-fastapi/requirements.txt
index 21d943187..ca6a375be 100644
--- a/pub_sub/python/sdk/order-processor-fastapi/requirements.txt
+++ b/pub_sub/python/sdk/order-processor-fastapi/requirements.txt
@@ -2,3 +2,4 @@ fastapi
 dapr-ext-fastapi-dev
 cloudevents
 uvicorn
+aiohttp>=3.9.4 # not directly required, pinned by Snyk to avoid a vulnerability