diff --git a/package-lock.json b/package-lock.json
index 127766c4c1008e..5948beca08f1f5 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -5868,9 +5868,9 @@
       "dev": true
     },
     "underscore": {
-      "version": "1.10.2",
-      "resolved": "https://registry.npmjs.org/underscore/-/underscore-1.10.2.tgz",
-      "integrity": "sha512-N4P+Q/BuyuEKFJ43B9gYuOj4TQUHXX+j2FqguVOpjkssLUUrnJofCcBccJSCoeturDoZU6GorDTHSvUDlSQbTg==",
+      "version": "1.12.1",
+      "resolved": "https://registry.npmjs.org/underscore/-/underscore-1.12.1.tgz",
+      "integrity": "sha512-hEQt0+ZLDVUMhebKxL4x1BTtDY7bavVofhZ9KZ4aI26X9SRaE+Y3m83XUL1UP2jn8ynjndwCCpEHdUG+9pP1Tw==",
       "dev": true
     },
     "underscore.string": {
diff --git a/package.json b/package.json
index 0203b11b55f269..70ac9585d1fff8 100644
--- a/package.json
+++ b/package.json
@@ -45,7 +45,7 @@
     "retext-spell": "^3.0.0",
     "retext-syntax-urls": "^1.0.2",
     "retext-usage": "^0.5.0",
-    "underscore": "^1.9.1",
+    "underscore": "^1.12.1",
     "walkdir": "^0.4.1",
     "xml2js": "^0.4.22"
   },