diff --git a/Makefile b/Makefile
index 817ad390f6..69d48e3381 100644
--- a/Makefile
+++ b/Makefile
@@ -53,11 +53,11 @@ compile-requirements: $(COMMON_CONSTRAINTS_TXT)  ## update the requirements/*.tx
 	pip-compile ${COMPILE_OPTS} -o requirements/pip-tools.txt requirements/pip-tools.in
 	pip install -qr requirements/pip.txt
 	pip install -qr requirements/pip-tools.txt
-	pip-compile ${COMPILE_OPTS} -o requirements/base.txt requirements/base.in
+	pip-compile ${COMPILE_OPTS} --allow-unsafe -o requirements/base.txt requirements/base.in
 	pip-compile ${COMPILE_OPTS} -o requirements/test.txt requirements/test.in
-	pip-compile ${COMPILE_OPTS} -o requirements/quality.txt requirements/quality.in
+	pip-compile ${COMPILE_OPTS} -o --allow-unsafe requirements/quality.txt requirements/quality.in
 	pip-compile ${COMPILE_OPTS} -o requirements/test-acceptance.txt requirements/test-acceptance.in
-	pip-compile ${COMPILE_OPTS} -o requirements/tox.txt requirements/tox.in
+	pip-compile ${COMPILE_OPTS} -o --allow-unsafe requirements/tox.txt requirements/tox.in
 	pip-compile ${COMPILE_OPTS} -o requirements/ci.txt requirements/ci.in
 	pip-compile ${COMPILE_OPTS} -o requirements/docs.txt requirements/docs.in
 	# Delete django pin from test requirements to avoid tox version collision
diff --git a/requirements/base.txt b/requirements/base.txt
index f4fe26c675..a3bbce3904 100644
--- a/requirements/base.txt
+++ b/requirements/base.txt
@@ -227,4 +227,7 @@ xblock==5.1.0
     # via -r requirements/base.in
 
 # The following packages are considered to be unsafe in a requirements file:
-# setuptools
+setuptools==59.8.0
+    # via
+    #   -c requirements/constraints.txt
+    #   fs