diff --git a/requirements.txt b/requirements.txt
index 0c990bb..dd9bb0e 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -57,3 +57,4 @@ websockets==10.2
 xlrd==1.2.0
 imgkit==1.2.2
 Jinja2==3.1.2
+setuptools>=65.5.1 # not directly required, pinned by Snyk to avoid a vulnerability