diff --git a/src/recommendationservice/requirements.txt b/src/recommendationservice/requirements.txt
index dd4798324f8..673e581189a 100644
--- a/src/recommendationservice/requirements.txt
+++ b/src/recommendationservice/requirements.txt
@@ -151,3 +151,4 @@ wrapt==1.14.0
 
 # The following packages are considered to be unsafe in a requirements file:
 # setuptools
+setuptools>=70.0.0 # not directly required, pinned by Snyk to avoid a vulnerability