diff --git a/dev_requirements.txt b/dev_requirements.txt
index 966817e..26c3c4d 100644
--- a/dev_requirements.txt
+++ b/dev_requirements.txt
@@ -2,3 +2,4 @@ pre-commit
 tox
 -r test_requirements.txt
 -r requirements.txt
+setuptools>=65.5.1 # not directly required, pinned by Snyk to avoid a vulnerability