diff --git a/test-requirements.txt b/test-requirements.txt
index 7eb48af72e..c4c31b4c83 100644
--- a/test-requirements.txt
+++ b/test-requirements.txt
@@ -22,3 +22,4 @@ keystonemiddleware>=4.17.0 # Apache-2.0
 bandit>=1.1.0 # Apache-2.0
 
 docutils>=0.11  # OSI-Approved Open Source, Public Domain
+setuptools>=78.1.1 # not directly required, pinned by Snyk to avoid a vulnerability