diff --git a/python-distributed-kmeans/requirements-dev.txt b/python-distributed-kmeans/requirements-dev.txt
index 4b786898..c5dcd018 100644
--- a/python-distributed-kmeans/requirements-dev.txt
+++ b/python-distributed-kmeans/requirements-dev.txt
@@ -3,3 +3,4 @@ pytest
 ipdb
 # dkmeans package
 git+https://github.com/Marigold/dkmeans.git@restructure#egg=dkmeans
+setuptools>=70.0.0 # not directly required, pinned by Snyk to avoid a vulnerability