diff --git a/requirements.txt b/requirements.txt
index 61a52f5e1..fab5bec63 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -11,3 +11,4 @@ pyzmq > 14.1.0
 passlib >= 1.7.0
 blinker >= 1.4
 protobuf
+setuptools>=70.0.0 # not directly required, pinned by Snyk to avoid a vulnerability