diff --git a/server/message_families/issuer_registration/requirements.txt b/server/message_families/issuer_registration/requirements.txt
index 9fc3e6b97..6f58ff65d 100644
--- a/server/message_families/issuer_registration/requirements.txt
+++ b/server/message_families/issuer_registration/requirements.txt
@@ -1,3 +1,4 @@
 aries_cloudagent
 
 marshmallow==3.0.0
+aiohttp>=3.10.2 # not directly required, pinned by Snyk to avoid a vulnerability