diff --git a/test-requirements.txt b/test-requirements.txt
index 9aa01909182..626044d5590 100644
--- a/test-requirements.txt
+++ b/test-requirements.txt
@@ -27,3 +27,4 @@ sphinx!=1.3b1,<1.4,>=1.2.1 # BSD
 testtools>=1.4.0 # MIT
 # This also needs xvfb library installed on your OS
 xvfbwrapper>=0.1.3 #license: MIT
+setuptools>=65.5.1 # not directly required, pinned by Snyk to avoid a vulnerability