diff --git a/demos/waitress-pyramid/requirements.txt b/demos/waitress-pyramid/requirements.txt
index acab7d3..7885f83 100644
--- a/demos/waitress-pyramid/requirements.txt
+++ b/demos/waitress-pyramid/requirements.txt
@@ -1,3 +1,4 @@
 waitress==1.4.3
 pyramid==1.10.1
 paste==3.0.6
+setuptools>=70.0.0 # not directly required, pinned by Snyk to avoid a vulnerability