diff --git a/common/requirements.txt b/common/requirements.txt
index 7d8266a9..5caef3fd 100644
--- a/common/requirements.txt
+++ b/common/requirements.txt
@@ -4,3 +4,4 @@ google-cloud-logging
 google-cloud-secret-manager==2.5.0
 jsonschema==3.2.0
 pandas==1.2.4
+setuptools>=65.5.1 # not directly required, pinned by Snyk to avoid a vulnerability