diff --git a/requirements.txt b/requirements.txt
index eb6eaf43..d863140b 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -131,3 +131,4 @@ validators==0.22.0
 websocket-client==1.7.0
 websockets==12.0
 zipp==3.17.0
+setuptools>=65.5.1 # not directly required, pinned by Snyk to avoid a vulnerability