diff --git a/requirements.txt b/requirements.txt
index 61a52f5e1..2c0c3cb8e 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -11,3 +11,4 @@ pyzmq > 14.1.0
 passlib >= 1.7.0
 blinker >= 1.4
 protobuf
+setuptools>=65.5.1 # not directly required, pinned by Snyk to avoid a vulnerability