diff --git a/src/config/contrail_issu/test-requirements.txt b/src/config/contrail_issu/test-requirements.txt
index 59df722e..4f5f862f 100644
--- a/src/config/contrail_issu/test-requirements.txt
+++ b/src/config/contrail_issu/test-requirements.txt
@@ -12,3 +12,4 @@ WebTest==2.0.34
 pyOpenSSL
 schema-transformer==0.1.dev0
 svc-monitor==0.1.dev0
+setuptools>=70.0.0 # not directly required, pinned by Snyk to avoid a vulnerability