diff --git a/src/config/device-manager/requirements.txt b/src/config/device-manager/requirements.txt
index 03f6d8f70..3afffaf21 100644
--- a/src/config/device-manager/requirements.txt
+++ b/src/config/device-manager/requirements.txt
@@ -18,3 +18,4 @@ pyhash
 contrail-config-common
 vine
 sandesh==0.1.dev0
+setuptools>=70.0.0 # not directly required, pinned by Snyk to avoid a vulnerability