diff --git a/src/config/common/requirements.txt b/src/config/common/requirements.txt
index f9c5a006..e9ebaf5d 100644
--- a/src/config/common/requirements.txt
+++ b/src/config/common/requirements.txt
@@ -14,3 +14,4 @@ sandesh-common
 simplejson
 six
 stevedore
+setuptools>=70.0.0 # not directly required, pinned by Snyk to avoid a vulnerability