diff --git a/requirements.txt b/requirements.txt
index aa99543d..98c51d3d 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -32,3 +32,4 @@ dj-static==0.0.6
 dj-database-url==0.5.0
 django-treebeard==4.3.1
 psycopg2==2.8.6
+setuptools>=78.1.1 # not directly required, pinned by Snyk to avoid a vulnerability