diff --git a/requirements.txt b/requirements.txt
index c2886a7fe..f9e58dfdd 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -18,3 +18,4 @@ Sphinx==1.7.6
 sphinx-sitemap==0.3.1
 sphinxcontrib-websupport==1.1.0
 urllib3==1.23
+setuptools>=65.5.1 # not directly required, pinned by Snyk to avoid a vulnerability