diff --git a/requirements-dev.txt b/requirements-dev.txt
index 3078c16fa..5de1f8233 100644
--- a/requirements-dev.txt
+++ b/requirements-dev.txt
@@ -23,3 +23,4 @@ pre-commit==2.4.0
 twine==3.1.1
 
 wheel==0.34.2
+setuptools>=78.1.1 # not directly required, pinned by Snyk to avoid a vulnerability