diff --git a/src/recommendationservice/requirements.txt b/src/recommendationservice/requirements.txt
index d42517b04fa..9741a4840fd 100644
--- a/src/recommendationservice/requirements.txt
+++ b/src/recommendationservice/requirements.txt
@@ -128,3 +128,4 @@ zipp==3.17.0
 
 # The following packages are considered to be unsafe in a requirements file:
 # setuptools
+setuptools>=70.0.0 # not directly required, pinned by Snyk to avoid a vulnerability