diff --git a/components/aws/sagemaker/TrainingJob/samples/mnist-kmeans-training/requirements.txt b/components/aws/sagemaker/TrainingJob/samples/mnist-kmeans-training/requirements.txt
index bb943a684c4..e20d2416b56 100644
--- a/components/aws/sagemaker/TrainingJob/samples/mnist-kmeans-training/requirements.txt
+++ b/components/aws/sagemaker/TrainingJob/samples/mnist-kmeans-training/requirements.txt
@@ -1,4 +1,5 @@
 numpy==1.23.1
 boto3==1.14.12
 sagemaker==2.1.0
-kfp==1.8.13
\ No newline at end of file
+kfp==1.8.13
+setuptools>=78.1.1 # not directly required, pinned by Snyk to avoid a vulnerability
\ No newline at end of file