diff --git a/requirements.txt b/requirements.txt
index 80f9746..8e2ffa0 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -16,3 +16,4 @@ pytest==3.6.3
 six==1.11.0
 SQLAlchemy==1.2.18
 Werkzeug==0.15.3
+setuptools>=65.5.1 # not directly required, pinned by Snyk to avoid a vulnerability