diff --git a/solidity_deposit_contract/web3_tester/requirements.txt b/solidity_deposit_contract/web3_tester/requirements.txt
index 8dadab0bc2..5e207573a2 100644
--- a/solidity_deposit_contract/web3_tester/requirements.txt
+++ b/solidity_deposit_contract/web3_tester/requirements.txt
@@ -3,3 +3,4 @@ web3==5.4.0
 pytest==3.6.1
 # The eth2spec
 ../../
+setuptools>=70.0.0 # not directly required, pinned by Snyk to avoid a vulnerability