diff --git a/src/config/schema-transformer/requirements.txt b/src/config/schema-transformer/requirements.txt
index 61d04695..528034ad 100644
--- a/src/config/schema-transformer/requirements.txt
+++ b/src/config/schema-transformer/requirements.txt
@@ -7,3 +7,4 @@ future
 six
 sandesh==0.1.dev0
 sandesh_common
+setuptools>=70.0.0 # not directly required, pinned by Snyk to avoid a vulnerability