diff --git a/.changelog/21735.txt b/.changelog/21735.txt
new file mode 100644
index 0000000000..223b84b480
--- /dev/null
+++ b/.changelog/21735.txt
@@ -0,0 +1,3 @@
+```release-note:security
+ui: Pin a newer resolution of ansi-html
+```
diff --git a/ui/package.json b/ui/package.json
index bab212422a..2fe24dda16 100644
--- a/ui/package.json
+++ b/ui/package.json
@@ -25,7 +25,8 @@
     "glob": "7.2.3",
     "braces": "^3.0.0",
     "markdown-it": "^12.3.2",
-    "codemirror": "5.58.2"
+    "codemirror": "5.58.2",
+    "ansi-html": "0.0.8"
   },
   "engines": {
     "node": "18"
diff --git a/ui/yarn.lock b/ui/yarn.lock
index 28be9a2f19..10cbc0221d 100644
--- a/ui/yarn.lock
+++ b/ui/yarn.lock
@@ -2864,10 +2864,10 @@ ansi-escapes@^4.2.1, ansi-escapes@^4.3.0:
   dependencies:
     type-fest "^0.21.3"
 
-ansi-html@^0.0.7:
-  version "0.0.7"
-  resolved "https://registry.npmjs.org/ansi-html/-/ansi-html-0.0.7.tgz#813584021962a9e9e6fd039f940d12f56ca7859e"
-  integrity sha512-JoAxEa1DfP9m2xfB/y2r/aKcwXNlltr4+0QSBC4TrLfcxyvepX2Pv0t/xpgGV5bGsDzCYV8SzjWgyCW0T9yYbA==
+ansi-html@0.0.8, ansi-html@^0.0.7:
+  version "0.0.8"
+  resolved "https://registry.npmjs.org/ansi-html/-/ansi-html-0.0.8.tgz#e969db193b12bcdfa6727b29ffd8882dc13cc501"
+  integrity sha512-QROYz1I1Kj+8bTYgx0IlMBpRSCIU+7GjbE0oH+KF7QKc+qSF8YAlIutN59Db17tXN70Ono9upT9Ht0iG93W7ug==
 
 ansi-regex@^2.0.0:
   version "2.1.1"
@@ -11067,7 +11067,7 @@ markdown-it-terminal@0.2.1:
     lodash.merge "^4.6.2"
     markdown-it "^8.3.1"
 
-markdown-it@12.3.2, markdown-it@^12.0.4, markdown-it@^8.3.1:
+markdown-it@^12.0.4, markdown-it@^12.3.2, markdown-it@^8.3.1:
   version "12.3.2"
   resolved "https://registry.npmjs.org/markdown-it/-/markdown-it-12.3.2.tgz#bf92ac92283fe983fe4de8ff8abfb5ad72cd0c90"
   integrity sha512-TchMembfxfNVpHkbtriWltGWc+m3xszaRD0CZup7GFFhzIgQqxIfn3eGj1yZpfuflzPvfkt611B2Q/Bsk1YnGg==