diff --git a/doc-requirements.txt b/doc-requirements.txt
index 65b0f20e..89c2fba0 100644
--- a/doc-requirements.txt
+++ b/doc-requirements.txt
@@ -13,7 +13,7 @@ beautifulsoup4==4.10.0
     #   furo
     #   sphinx-code-include
     #   sphinx-material
-certifi==2021.10.8
+certifi==2022.12.7
     # via requests
 charset-normalizer==2.0.10
     # via requests
@@ -101,3 +101,4 @@ urllib3==1.26.7
 
 # The following packages are considered to be unsafe in a requirements file:
 # setuptools
+setuptools>=65.5.1 # not directly required, pinned by Snyk to avoid a vulnerability