diff --git a/requirements.txt b/requirements.txt
index f958ad7b..6b93d288 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -9,6 +9,7 @@ fire
 fuzzywuzzy
 openai
 litellm>=1.73  # to support `from litellm import get_valid_models`
+aiohttp>=3.13.4  # CVE-2026-22815, CVE-2026-34515, CVE-2026-34516, CVE-2026-34525
 azure.identity
 pyarrow
 rich