diff --git a/examples/demo_workflow/demo_workflow/requirements.txt b/examples/demo_workflow/demo_workflow/requirements.txt
index 61f7f5c82..2360287af 100644
--- a/examples/demo_workflow/demo_workflow/requirements.txt
+++ b/examples/demo_workflow/demo_workflow/requirements.txt
@@ -1 +1,2 @@
 dapr-ext-workflow-dev>=0.0.1rc1.dev
+aiohttp>=3.9.4 # not directly required, pinned by Snyk to avoid a vulnerability