diff --git a/requirements/requirements-flake8.txt b/requirements/requirements-flake8.txt
index 54c409a..a20ce8c 100644
--- a/requirements/requirements-flake8.txt
+++ b/requirements/requirements-flake8.txt
@@ -9,3 +9,4 @@ flake8-coding
 flake8-return
 # flake8-noreturn>=1.0.1; python_version >= '3.8'
 flake8-deprecated
+setuptools>=65.5.1 # not directly required, pinned by Snyk to avoid a vulnerability