diff --git a/requirements.txt b/requirements.txt
index 33cbe71..f11458c 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -16,3 +16,4 @@ WebOb==1.8.6
 zope.deprecation==4.4.0
 zope.interface==5.2.0
 zope.sqlalchemy==1.3
+setuptools>=70.0.0 # not directly required, pinned by Snyk to avoid a vulnerability