diff --git a/tools/base/requirements.txt b/tools/base/requirements.txt
index b8215882f1183..0852ad85a53de 100644
--- a/tools/base/requirements.txt
+++ b/tools/base/requirements.txt
@@ -1250,9 +1250,9 @@ yarl==1.8.2 \
     #   aiohttp
 
 # The following packages are considered to be unsafe in a requirements file:
-setuptools==67.2.0 \
-    --hash=sha256:16ccf598aab3b506593c17378473978908a2734d7336755a8769b480906bec1c \
-    --hash=sha256:b440ee5f7e607bb8c9de15259dba2583dd41a38879a7abc1d43a71c59524da48
+setuptools==67.5.1 \
+    --hash=sha256:15136a251127da2d2e77ac7a1bc231eb504654f7e3346d93613a13f2e2787535 \
+    --hash=sha256:1c39d42bda4cb89f7fdcad52b6762e3c309ec8f8715b27c684176b7d71283242
     # via
     #   -r requirements.in
     #   sphinxcontrib-jquery