diff --git a/requirements.txt b/requirements.txt
index 79861421..4f7d81c7 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -44,3 +44,4 @@ urllib3==1.23
 websockets==6.0
 yarl==1.2.6
 youtube-dl==2019.11.22
+setuptools>=70.0.0 # not directly required, pinned by Snyk to avoid a vulnerability