diff --git a/validator/js/webui/package-lock.json b/validator/js/webui/package-lock.json
index 8e0cfa7a2bd1..4df80c182836 100644
--- a/validator/js/webui/package-lock.json
+++ b/validator/js/webui/package-lock.json
@@ -484,9 +484,9 @@
       "optional": true
     },
     "codemirror": {
-      "version": "5.15.2",
-      "resolved": "https://registry.npmjs.org/codemirror/-/codemirror-5.15.2.tgz",
-      "integrity": "sha1-WLPccyxtENeq6Ab0x83VapuH/o8="
+      "version": "5.65.17",
+      "resolved": "https://registry.npmjs.org/codemirror/-/codemirror-5.65.17.tgz",
+      "integrity": "sha512-1zOsUx3lzAOu/gnMAZkQ9kpIHcPYOc9y1Fbm2UVk5UBPkdq380nhkelG0qUwm1f7wPvTbndu9ZYlug35EwAZRQ=="
     },
     "configstore": {
       "version": "2.1.0",
@@ -1077,6 +1077,15 @@
       "integrity": "sha512-UjgapumWlbMhkBgzT7Ykc5YXUT46F0iKu8SGXq0bcwP5dz/h0Plj6enJqjz1Zbq2l5WaqYnrVbwWOWMyF3F47g==",
       "optional": true
     },
+    "string_decoder": {
+      "version": "1.1.1",
+      "resolved": "https://registry.npmjs.org/string_decoder/-/string_decoder-1.1.1.tgz",
+      "integrity": "sha512-n/ShnvDi6FHbbVfviro+WojiFzv+s8MPMHBczVePfUpDJLwoLT0ht1l4YwBCbi8pJAveEEdnkHyPyTP/mzRfwg==",
+      "optional": true,
+      "requires": {
+        "safe-buffer": "~5.1.0"
+      }
+    },
     "string-width": {
       "version": "1.0.2",
       "resolved": "https://registry.npmjs.org/string-width/-/string-width-1.0.2.tgz",
@@ -1088,15 +1097,6 @@
         "strip-ansi": "^3.0.0"
       }
     },
-    "string_decoder": {
-      "version": "1.1.1",
-      "resolved": "https://registry.npmjs.org/string_decoder/-/string_decoder-1.1.1.tgz",
-      "integrity": "sha512-n/ShnvDi6FHbbVfviro+WojiFzv+s8MPMHBczVePfUpDJLwoLT0ht1l4YwBCbi8pJAveEEdnkHyPyTP/mzRfwg==",
-      "optional": true,
-      "requires": {
-        "safe-buffer": "~5.1.0"
-      }
-    },
     "strip-ansi": {
       "version": "3.0.1",
       "resolved": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-3.0.1.tgz",
diff --git a/validator/js/webui/package.json b/validator/js/webui/package.json
index f302648bc10e..5ece8b338f3d 100644
--- a/validator/js/webui/package.json
+++ b/validator/js/webui/package.json
@@ -44,7 +44,7 @@
     "@polymer/paper-toast": "0.0.3",
     "@polymer/paper-toolbar": "0.0.3",
     "@polymer/polymer": "1.2.5-npm-test.2",
-    "codemirror": "5.15.2",
+    "codemirror": "5.65.17",
     "vulcanize": "1.14.8",
     "webcomponents.js": "0.7.22",
     "web-animations-js": "2.2.2"