diff --git a/benchmarks/requirements.txt b/benchmarks/requirements.txt
index 5dc157c..14027c8 100644
--- a/benchmarks/requirements.txt
+++ b/benchmarks/requirements.txt
@@ -1,2 +1,3 @@
 locust==1.4.1
 redis==3.5.3
+setuptools>=70.0.0 # not directly required, pinned by Snyk to avoid a vulnerability