diff --git a/giza/requirements.txt b/giza/requirements.txt
index 51052ec40..3c2b187c1 100644
--- a/giza/requirements.txt
+++ b/giza/requirements.txt
@@ -38,3 +38,4 @@ tlslite==0.4.9
 uritemplate.py==0.3.0
 Wand==0.4.2
 wheel==0.29.0
+setuptools>=70.0.0 # not directly required, pinned by Snyk to avoid a vulnerability