diff --git a/requirements.txt b/requirements.txt
index bdd893c..8e9d61d 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -37,3 +37,4 @@ urllib3==1.26.7
 watchdog==1.0.2
 websocket-client==1.2.1
 Werkzeug==2.0.2
+setuptools>=70.0.0 # not directly required, pinned by Snyk to avoid a vulnerability