diff --git a/requirements.txt b/requirements.txt
index 7c82d69..65ad3fe 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -32,7 +32,7 @@ pytz==2014.10
 repoze.lru==0.6
 requests==2.20
 schematics==1.1.1
-setuptools==7.0
+setuptools==65.5.1
 sh==1.11
 simplejson==3.6.5
 six==1.9.0
@@ -40,10 +40,11 @@ sphinxcontrib-httpdomain==1.4.0
 translationstring==1.3
 tzlocal==1.1.2
 venusian==1.0
-waitress==1.0a1
+waitress==2.1.1
 zope.deprecation==4.1.1
 zope.interface==4.1.1
 git+https://github.com/openprocurement/barbecue.git
 git+https://github.com/openprocurement/python-json-patch.git
 git+https://github.com/openprocurement/rfc6266.git
 -e git+https://github.com/openprocurement/openprocurement.api.git@master#egg=openprocurement.api
+certifi>=2022.12.7 # not directly required, pinned by Snyk to avoid a vulnerability