diff --git a/package.json b/package.json
index 3eda7b4..ed25a7b 100644
--- a/package.json
+++ b/package.json
@@ -48,7 +48,7 @@
     "chart.js": "2.3.0",
     "cli-real-favicon": "0.0.6",
     "clipboard": "^1.5.15",
-    "codemirror": "^5.20.2",
+    "codemirror": "^5.58.2",
     "compression": "1.6.2",
     "connect-mongo": "1.3.2",
     "cookie-parser": "^1.4.3",
diff --git a/yarn.lock b/yarn.lock
index 7a7c9ee..7d01643 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -2008,9 +2008,10 @@ code-point-at@^1.0.0:
   version "1.1.0"
   resolved "https://registry.yarnpkg.com/code-point-at/-/code-point-at-1.1.0.tgz#0d070b4d043a5bea33a2f1a40e2edb3d9a4ccf77"
 
-codemirror@^5.13.4, codemirror@^5.20.2:
-  version "5.39.2"
-  resolved "https://registry.yarnpkg.com/codemirror/-/codemirror-5.39.2.tgz#778aa13b55ebf280745c309cb1b148e3fc06f698"
+codemirror@^5.13.4, codemirror@^5.58.2:
+  version "5.58.2"
+  resolved "https://registry.yarnpkg.com/codemirror/-/codemirror-5.58.2.tgz#ed54a1796de1498688bea1cdd4e9eeb187565d1b"
+  integrity sha512-K/hOh24cCwRutd1Mk3uLtjWzNISOkm4fvXiMO7LucCrqbh6aJDdtqUziim3MZUI6wOY0rvY1SlL1Ork01uMy6w==
 
 collection-visit@^1.0.0:
   version "1.0.0"
@@ -2930,7 +2931,7 @@ etag@~1.7.0:
 
 event-stream@^3.1.7, event-stream@~3.3.0:
   version "3.3.4"
-  resolved "http://registry.npmjs.org/event-stream/-/event-stream-3.3.4.tgz#4ab4c9a0f5a54db9338b4c34d86bfce8f4b35571"
+  resolved "https://registry.npmjs.org/event-stream/-/event-stream-3.3.4.tgz#4ab4c9a0f5a54db9338b4c34d86bfce8f4b35571"
   dependencies:
     duplexer "~0.1.1"
     from "~0"