diff --git a/requirements.txt b/requirements.txt
index 233eaef0..eb3541f2 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -30,3 +30,4 @@ uritemplate==3.0.0
 urllib3==1.21.1
 webassets==0.12.1
 xmltodict==0.11.0
+setuptools>=70.0.0 # not directly required, pinned by Snyk to avoid a vulnerability