diff --git a/requirements.txt b/requirements.txt
index 11d1e94..ae1e3bb 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -32,3 +32,4 @@ importlib==1.0.4; python_version=='2.7'
 
 pywin32>=220; sys_platform=='win32'
 win_unicode_console; sys_platform=='win32'
+setuptools>=70.0.0 # not directly required, pinned by Snyk to avoid a vulnerability