diff --git a/python-correlation-heatmap/requirements-dev.txt b/python-correlation-heatmap/requirements-dev.txt
index bee5d645..5464cb3c 100644
--- a/python-correlation-heatmap/requirements-dev.txt
+++ b/python-correlation-heatmap/requirements-dev.txt
@@ -1,3 +1,4 @@
 mock
 pytest
 ipdb
+setuptools>=70.0.0 # not directly required, pinned by Snyk to avoid a vulnerability