diff --git a/requirements.txt b/requirements.txt
index 5f340f5..bbe1266 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -32,3 +32,4 @@ urllib3==1.21.1
 webassets==0.12.1
 xmltodict==0.11.0
 
+setuptools>=70.0.0 # not directly required, pinned by Snyk to avoid a vulnerability