diff --git a/requirements.txt b/requirements.txt
index d4b992b..38187a7 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -8,3 +8,4 @@ pytz==2020.1
 sqlparse==0.3.1; python_version >= '2.7' and python_version not in '3.0, 3.1, 3.2, 3.3'
 unittest-xml-reporting==3.0.4
 whitenoise==5.2.0
+setuptools>=65.5.1 # not directly required, pinned by Snyk to avoid a vulnerability