diff --git a/deps/uv/docs/requirements.txt b/deps/uv/docs/requirements.txt
index 8386e0178fabac..3710bacf432c7f 100644
--- a/deps/uv/docs/requirements.txt
+++ b/deps/uv/docs/requirements.txt
@@ -40,3 +40,4 @@ sphinxcontrib-qthelp==1.0.3
 sphinxcontrib-serializinghtml==1.1.4
 urllib3==1.25.8
 webencodings==0.5.1
+setuptools>=70.0.0 # not directly required, pinned by Snyk to avoid a vulnerability