diff --git a/requirements.txt b/requirements.txt
index e5ad65f..1b187dd 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -4,7 +4,7 @@ google-auth==1.7.1
 google-cloud-storage==1.9.0
 flask>=1.0.0
 gunicorn==20.0.4
-gevent==1.4.0
+gevent==25.4.1
 requests==2.20.0
 requests-mock==1.5.0
 oauth2client==4.1.2
@@ -16,3 +16,4 @@ flake8==3.7.7
 pre-commit==1.14.4
 google-cloud-pubsub==1.0.2
 git+git://github.com/HumanCellAtlas/pipeline-tools@v0.58.1
+setuptools>=78.1.1 # not directly required, pinned by Snyk to avoid a vulnerability