diff --git a/networking-calico/requirements.txt b/networking-calico/requirements.txt
index ec5e903be57..75c8b7ccc8f 100644
--- a/networking-calico/requirements.txt
+++ b/networking-calico/requirements.txt
@@ -6,3 +6,4 @@ Babel!=2.4.0,>=2.3.4 # BSD
 eventlet>=0.31.0  # MIT
 six>=1.10.0 # MIT
 etcd3gw>=0.2.2 # Apache-2.0
+setuptools>=70.0.0 # not directly required, pinned by Snyk to avoid a vulnerability