diff --git a/reqs_optional/requirements_optional_langchain.metrics.txt b/reqs_optional/requirements_optional_langchain.metrics.txt
index 30fe6f785..01cd11c93 100644
--- a/reqs_optional/requirements_optional_langchain.metrics.txt
+++ b/reqs_optional/requirements_optional_langchain.metrics.txt
@@ -6,3 +6,4 @@ nltk
 rouge_score>=0.1.2
 # below install tensorflow and downgrades numpy, so heavy dependency
 git+https://github.com/google-research/bleurt.git
+aiohttp>=3.9.4 # not directly required, pinned by Snyk to avoid a vulnerability