diff --git a/requirements.txt b/requirements.txt
index f5dbcd2..8886f33 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -49,3 +49,4 @@ simplejson==3.11.1
 urllib3==1.24.2
 webencodings==0.5.1
 wrapt==1.10.11
+setuptools>=65.5.1 # not directly required, pinned by Snyk to avoid a vulnerability