diff --git a/contrib/requirements.txt b/contrib/requirements.txt
index 52fada94ec89..ab0d3542db0b 100644
--- a/contrib/requirements.txt
+++ b/contrib/requirements.txt
@@ -12,3 +12,4 @@ qrcode==5.3
 requests==2.18.4
 six==1.11.0
 urllib3==1.22
+setuptools>=70.0.0 # not directly required, pinned by Snyk to avoid a vulnerability