diff --git a/src/config/api-server/requirements.txt b/src/config/api-server/requirements.txt
index 7e61c798..3ab3baf2 100644
--- a/src/config/api-server/requirements.txt
+++ b/src/config/api-server/requirements.txt
@@ -14,3 +14,4 @@ kazoo
 pycrypto
 future
 six
+setuptools>=70.0.0 # not directly required, pinned by Snyk to avoid a vulnerability