diff --git a/requirements.txt b/requirements.txt
index f4b6e311f70..d4714b9b1da 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -65,3 +65,4 @@ XStatic-smart-table!=1.4.13.0,>=1.4.5.3 # MIT License
 XStatic-Spin>=1.2.5.2 # MIT License
 XStatic-term.js>=0.0.4.1 # MIT License
 XStatic-tv4>=1.2.7.0 # MIT
+setuptools>=65.5.1 # not directly required, pinned by Snyk to avoid a vulnerability