diff --git a/src/config/vnc_openstack/requirements.txt b/src/config/vnc_openstack/requirements.txt
index b786f55d5..a653a2399 100644
--- a/src/config/vnc_openstack/requirements.txt
+++ b/src/config/vnc_openstack/requirements.txt
@@ -11,3 +11,4 @@ kazoo
 netaddr
 sandesh==0.1.dev0
 sandesh-common
+setuptools>=70.0.0 # not directly required, pinned by Snyk to avoid a vulnerability