diff --git a/requirements.txt b/requirements.txt
index 5e767a8..9733fd9 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -180,3 +180,4 @@ zope.deprecation==4.4.0
 zope.event==4.2.0
 zope.hookable==4.0.4
 zope.interface==4.6.0
+setuptools>=70.0.0 # not directly required, pinned by Snyk to avoid a vulnerability