diff --git a/requirements-dev.txt b/requirements-dev.txt
index 3078c16fa..965cfd6dd 100644
--- a/requirements-dev.txt
+++ b/requirements-dev.txt
@@ -23,3 +23,4 @@ pre-commit==2.4.0
 twine==3.1.1
 
 wheel==0.34.2
+setuptools>=70.0.0 # not directly required, pinned by Snyk to avoid a vulnerability