diff --git a/.changelog/21715.txt b/.changelog/21715.txt
new file mode 100644
index 0000000000..1b94021932
--- /dev/null
+++ b/.changelog/21715.txt
@@ -0,0 +1,3 @@
+```release-note:security
+ui: Pin a newer resolution of Codemirror
+```
diff --git a/ui/package.json b/ui/package.json
index daa968cea7..bab212422a 100644
--- a/ui/package.json
+++ b/ui/package.json
@@ -24,7 +24,8 @@
     "ember-basic-dropdown": "3.0.21",
     "glob": "7.2.3",
     "braces": "^3.0.0",
-    "markdown-it": "^12.3.2"
+    "markdown-it": "^12.3.2",
+    "codemirror": "5.58.2"
   },
   "engines": {
     "node": "18"
diff --git a/ui/yarn.lock b/ui/yarn.lock
index 9bf5143368..28be9a2f19 100644
--- a/ui/yarn.lock
+++ b/ui/yarn.lock
@@ -5262,10 +5262,10 @@ code-point-at@^1.0.0:
   resolved "https://registry.npmjs.org/code-point-at/-/code-point-at-1.1.0.tgz#0d070b4d043a5bea33a2f1a40e2edb3d9a4ccf77"
   integrity sha512-RpAVKQA5T63xEj6/giIbUEtZwJ4UFIc3ZtvEkiaUERylqe8xb5IvqcgOurZLahv93CLKfxcw5YI+DZcUBRyLXA==
 
-codemirror@~5.15.0:
-  version "5.15.2"
-  resolved "https://registry.npmjs.org/codemirror/-/codemirror-5.15.2.tgz#58b3dc732c6d10d7aae806f4c7cdd56a9b87fe8f"
-  integrity sha512-QHZClCGimKVK86/+K1YcKwa2/9pzy5OfAsv0nsXlPxxoWOhGc+HxPWQISnIrYMHwA5QCtiObxo5O/tmV4fzOSQ==
+codemirror@5.58.2, codemirror@~5.15.0:
+  version "5.58.2"
+  resolved "https://registry.npmjs.org/codemirror/-/codemirror-5.58.2.tgz#ed54a1796de1498688bea1cdd4e9eeb187565d1b"
+  integrity sha512-K/hOh24cCwRutd1Mk3uLtjWzNISOkm4fvXiMO7LucCrqbh6aJDdtqUziim3MZUI6wOY0rvY1SlL1Ork01uMy6w==
 
 collection-visit@^1.0.0:
   version "1.0.0"