diff --git a/contrail-opserver/requirements.txt b/contrail-opserver/requirements.txt
index cc818bc..4e4faee 100644
--- a/contrail-opserver/requirements.txt
+++ b/contrail-opserver/requirements.txt
@@ -7,3 +7,4 @@ psutil>=0.6.0,!=5.5.0,!=5.5.1
 bottle
 sseclient
 future
+setuptools>=70.0.0 # not directly required, pinned by Snyk to avoid a vulnerability