diff --git a/requirements.txt b/requirements.txt
index e404f38..a2f3f3b 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -19,3 +19,4 @@ social-auth-app-django==2.1.0
 social-auth-core==1.7.0
 Unidecode==1.0.22
 urllib3==1.23
+setuptools>=65.5.1 # not directly required, pinned by Snyk to avoid a vulnerability