diff --git a/cvat-cli/requirements/base.txt b/cvat-cli/requirements/base.txt
index b250055840c6..ecef7b5601f1 100644
--- a/cvat-cli/requirements/base.txt
+++ b/cvat-cli/requirements/base.txt
@@ -1,2 +1,3 @@
 cvat-sdk~=2.4.0
 Pillow>=6.2.0
+setuptools>=65.5.1 # not directly required, pinned by Snyk to avoid a vulnerability