diff --git a/requirements.txt b/requirements.txt
index c6fcaf4..a802163 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -44,4 +44,5 @@ werkzeug==2.1.2
 zipp==3.11.0
 rcssmin==1.1.1
 zxcvbn==4.4.28
-psycopg2==2.9.5
\ No newline at end of file
+psycopg2==2.9.5
+setuptools==65.5.1 # fixes CVE-2022-40897
\ No newline at end of file