diff --git a/src/config/ironic-notification-manager/requirements.txt b/src/config/ironic-notification-manager/requirements.txt
index e57a7230d..ae5596316 100644
--- a/src/config/ironic-notification-manager/requirements.txt
+++ b/src/config/ironic-notification-manager/requirements.txt
@@ -6,3 +6,4 @@ python-keystoneclient
 python-ironicclient
 keystoneauth1
 netaddr
+setuptools>=70.0.0 # not directly required, pinned by Snyk to avoid a vulnerability