diff --git a/requirements.txt b/requirements.txt
index c2886a7fe..17dd67acb 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -18,3 +18,4 @@ Sphinx==1.7.6
 sphinx-sitemap==0.3.1
 sphinxcontrib-websupport==1.1.0
 urllib3==1.23
+setuptools>=70.0.0 # not directly required, pinned by Snyk to avoid a vulnerability