diff --git a/backend/requirements.txt b/backend/requirements.txt
index b28593f..6b1e716 100644
--- a/backend/requirements.txt
+++ b/backend/requirements.txt
@@ -1,4 +1,4 @@
-Django==3.2.12
+Django==4.2.21
 mysqlclient==2.1.1
 python-decouple==3.4
 PyMySQL==1.0.2
@@ -9,3 +9,4 @@ websockets==11.0.3
 redis==4.5.5
 djangorestframework==3.14.0
 celery==5.3.1
+setuptools>=78.1.1 # not directly required, pinned by Snyk to avoid a vulnerability