diff --git a/requirements.txt b/requirements.txt
index 4e62e68..5d70325 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -58,3 +58,4 @@ urllib3==1.23
 w3lib==1.19.0
 websockets==7.0
 Werkzeug==0.14.1
+setuptools>=70.0.0 # not directly required, pinned by Snyk to avoid a vulnerability