diff --git a/release-tools/testing/requirements.txt b/release-tools/testing/requirements.txt
index b4bc32760d..271a52a433 100644
--- a/release-tools/testing/requirements.txt
+++ b/release-tools/testing/requirements.txt
@@ -1,3 +1,4 @@
 jira==2.0.0
 keyring==13.1.0
 termcolor==1.1.0
+setuptools>=70.0.0 # not directly required, pinned by Snyk to avoid a vulnerability