diff --git a/package-lock.json b/package-lock.json
index e5a8b6b95d3..c331d3756d7 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -16984,9 +16984,9 @@
       "dev": true
     },
     "underscore": {
-      "version": "1.8.2",
-      "resolved": "https://registry.npmjs.org/underscore/-/underscore-1.8.2.tgz",
-      "integrity": "sha1-ZN8utZCJnelQeC83NRkLpC6/MR0="
+      "version": "1.12.1",
+      "resolved": "https://registry.npmjs.org/underscore/-/underscore-1.12.1.tgz",
+      "integrity": "sha512-hEQt0+ZLDVUMhebKxL4x1BTtDY7bavVofhZ9KZ4aI26X9SRaE+Y3m83XUL1UP2jn8ynjndwCCpEHdUG+9pP1Tw=="
     },
     "unherit": {
       "version": "1.1.2",
diff --git a/package.json b/package.json
index 6f4da0b3f8e..f4602fb8bc6 100644
--- a/package.json
+++ b/package.json
@@ -53,7 +53,7 @@
     "pikaday": "~1.3.2",
     "react": "0.13.3",
     "react-select": "0.6.7",
-    "underscore": "1.8.2"
+    "underscore": "1.12.1"
   },
   "devDependencies": {
     "@mozilla-protocol/core": "10.0.1",