diff --git a/requirements/test.txt b/requirements/test.txt
index b4e8f4b..3c9be9d 100644
--- a/requirements/test.txt
+++ b/requirements/test.txt
@@ -22,3 +22,4 @@ untokenize==0.1.1         # via unify
 
 # The following packages are considered to be unsafe in a requirements file:
 # setuptools
+setuptools>=70.0.0 # not directly required, pinned by Snyk to avoid a vulnerability