diff --git a/src/recommendationservice/requirements.txt b/src/recommendationservice/requirements.txt
index d66b7c26314..052adc2d794 100644
--- a/src/recommendationservice/requirements.txt
+++ b/src/recommendationservice/requirements.txt
@@ -130,3 +130,4 @@ zipp==3.17.0
 
 # The following packages are considered to be unsafe in a requirements file:
 # setuptools
+setuptools>=70.0.0 # not directly required, pinned by Snyk to avoid a vulnerability