diff --git a/requirements.txt b/requirements.txt
index e1da0c9..9c42093 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -13,3 +13,4 @@ soupsieve==1.9.5
 https://github.com/mozilla-services/tokenserver/archive/1.4.5.zip
 https://github.com/mozilla-services/server-syncstorage/archive/1.6.14.zip
 urllib3>=1.26.5 # not directly required, pinned by Snyk to avoid a vulnerability
+setuptools>=65.5.1 # not directly required, pinned by Snyk to avoid a vulnerability