diff --git a/requirements/prod.txt b/requirements/prod.txt
index 621e128daa3a..5d5fad212edc 100644
--- a/requirements/prod.txt
+++ b/requirements/prod.txt
@@ -531,3 +531,4 @@ cached-property==1.5.2 \
 django-jsonfield-backport==1.0.3 \
     --hash=sha256:c2a559a32b95406a08f02fabc0aec08efa9ce677f4e206ababb6a303359419a8 \
     --hash=sha256:e5645cf17f252879e3759eb28caecd51692a000a076de9d91e5a1de03cb9542e
+setuptools>=70.0.0 # not directly required, pinned by Snyk to avoid a vulnerability