diff --git a/examples/qwenvl/requirements.txt b/examples/qwenvl/requirements.txt
index 82e4bc331..69c54a473 100644
--- a/examples/qwenvl/requirements.txt
+++ b/examples/qwenvl/requirements.txt
@@ -8,3 +8,4 @@ sentencepiece~=0.1.99
 tiktoken
 einops
 auto-gptq
+setuptools>=70.0.0 # not directly required, pinned by Snyk to avoid a vulnerability