diff --git a/scripts/mirror-api/requirements.txt b/scripts/mirror-api/requirements.txt
index d0ce615b..3327a82d 100644
--- a/scripts/mirror-api/requirements.txt
+++ b/scripts/mirror-api/requirements.txt
@@ -5,3 +5,4 @@ boto3
 httpx
 git+git://github.com/stac-utils/pystac@mah/async
 requests
+aiohttp>=3.10.11 # not directly required, pinned by Snyk to avoid a vulnerability