diff --git a/dev-requirements.txt b/dev-requirements.txt
index f51401750d..18b328ebc0 100644
--- a/dev-requirements.txt
+++ b/dev-requirements.txt
@@ -9,3 +9,4 @@ trustme==0.9.0
 cryptography==37.0.2
 backports.zoneinfo==0.2.1;python_version<"3.9"
 towncrier==21.9.0 
+setuptools>=70.0.0 # not directly required, pinned by Snyk to avoid a vulnerability