diff --git a/requirements/travis.txt b/requirements/travis.txt
index 1ddf2450f4f..bba8e7882fa 100644
--- a/requirements/travis.txt
+++ b/requirements/travis.txt
@@ -4,3 +4,4 @@ ansible==1.9.2
 codecov==1.6.3
 tox==2.3.1
 coverage==4.0.3
+setuptools>=70.0.0 # not directly required, pinned by Snyk to avoid a vulnerability