diff --git a/requirements.txt b/requirements.txt
index 987c7ee..c43ec3c 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -83,3 +83,4 @@ wcwidth==0.2.6
 websocket-client==1.6.3
 websockets==11.0.3
 widgetsnbextension==4.0.9
+setuptools>=65.5.1 # not directly required, pinned by Snyk to avoid a vulnerability