diff --git a/requirements-dev.txt b/requirements-dev.txt
index 0413d9aa0..147165c79 100644
--- a/requirements-dev.txt
+++ b/requirements-dev.txt
@@ -13,3 +13,4 @@ sqlalchemy~=1.3.22
 
 # install & pin for networkx
 decorator==4.4.2
+setuptools>=70.0.0 # not directly required, pinned by Snyk to avoid a vulnerability