diff --git a/src/package-lock.json b/src/package-lock.json
index 2227ac23..f028521f 100644
--- a/src/package-lock.json
+++ b/src/package-lock.json
@@ -8360,9 +8360,9 @@
       }
     },
     "underscore": {
-      "version": "1.8.3",
-      "resolved": "https://registry.npmjs.org/underscore/-/underscore-1.8.3.tgz",
-      "integrity": "sha1-Tz+1OxBuYJf8+ctBCfKl6b36UCI="
+      "version": "1.12.0",
+      "resolved": "https://registry.npmjs.org/underscore/-/underscore-1.12.0.tgz",
+      "integrity": "sha512-21rQzss/XPMjolTiIezSu3JAjgagXKROtNrYFEOWK109qY1Uv2tVjPTZ1ci2HgvQDA16gHYSthQIJfB+XId/rQ=="
     },
     "unified": {
       "version": "9.2.0",
diff --git a/src/package.json b/src/package.json
index 71e7bd39..0f84487b 100644
--- a/src/package.json
+++ b/src/package.json
@@ -69,7 +69,7 @@
     "tiny-worker": "^2.3.0",
     "tinycon": "0.0.1",
     "ueberdb2": "^1.2.5",
-    "underscore": "1.8.3",
+    "underscore": "1.12.0",
     "unorm": "1.4.1",
     "wtfnode": "^0.8.4"
   },