diff --git a/python/requirements-optional.txt b/python/requirements-optional.txt
index 77de05af3..9dd2924d5 100644
--- a/python/requirements-optional.txt
+++ b/python/requirements-optional.txt
@@ -3,3 +3,4 @@ web3 >= 4.8
 Pillow
 stellar-sdk>=4.0.0,<6.0.0
 rlp>=1.1.0 ; python_version<'3.7'
+setuptools>=78.1.1 # not directly required, pinned by Snyk to avoid a vulnerability