diff --git a/scrape/requirements.txt b/scrape/requirements.txt
index a3b50451..30d0340c 100644
--- a/scrape/requirements.txt
+++ b/scrape/requirements.txt
@@ -7,3 +7,4 @@ pyOpenSSL==0.13
 requests==1.1.0
 w3lib==1.2
 zope.interface==4.0.3
+setuptools>=78.1.1 # not directly required, pinned by Snyk to avoid a vulnerability