diff --git a/package.json b/package.json
index 4ef45b0ec..9123ab910 100644
--- a/package.json
+++ b/package.json
@@ -22,7 +22,7 @@
     "nodemailer-smtp-transport": "^1.0.3",
     "passport-local": "^1.0.0",
     "request": "^2.60.0",
-    "underscore": "^1.8.3",
+    "underscore": "^1.12.1",
     "validator": "^3.40.1"
   },
   "scripts": {
diff --git a/yarn.lock b/yarn.lock
index 72662af87..bfb7c5cd8 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -5123,10 +5123,10 @@ undefsafe@^2.0.2:
   dependencies:
     debug "^2.2.0"
 
-underscore@^1.8.3:
-  version "1.10.2"
-  resolved "https://registry.yarnpkg.com/underscore/-/underscore-1.10.2.tgz#73d6aa3668f3188e4adb0f1943bd12cfd7efaaaf"
-  integrity sha512-N4P+Q/BuyuEKFJ43B9gYuOj4TQUHXX+j2FqguVOpjkssLUUrnJofCcBccJSCoeturDoZU6GorDTHSvUDlSQbTg==
+underscore@^1.12.1:
+  version "1.12.1"
+  resolved "https://registry.yarnpkg.com/underscore/-/underscore-1.12.1.tgz#7bb8cc9b3d397e201cf8553336d262544ead829e"
+  integrity sha512-hEQt0+ZLDVUMhebKxL4x1BTtDY7bavVofhZ9KZ4aI26X9SRaE+Y3m83XUL1UP2jn8ynjndwCCpEHdUG+9pP1Tw==
 
 undertaker-registry@^1.0.0:
   version "1.0.1"