diff --git a/requirements/base.txt b/requirements/base.txt
index 8d33b8f..4a77a17 100644
--- a/requirements/base.txt
+++ b/requirements/base.txt
@@ -8,7 +8,7 @@ appdirs==1.4.4
     # via fs
 fs==2.4.16
     # via xblock
-lxml==4.9.0
+lxml==4.9.1
     # via xblock
 markupsafe==2.1.1
     # via xblock
@@ -31,3 +31,4 @@ xblock==1.6.1
 
 # The following packages are considered to be unsafe in a requirements file:
 # setuptools
+setuptools>=65.5.1 # not directly required, pinned by Snyk to avoid a vulnerability