diff --git a/package-lock.json b/package-lock.json
index ea5b612d..c0318a61 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -390,9 +390,9 @@
       "dev": true
     },
     "underscore": {
-      "version": "1.8.3",
-      "resolved": "https://registry.npmjs.org/underscore/-/underscore-1.8.3.tgz",
-      "integrity": "sha1-Tz+1OxBuYJf8+ctBCfKl6b36UCI=",
+      "version": "1.12.1",
+      "resolved": "https://registry.npmjs.org/underscore/-/underscore-1.12.1.tgz",
+      "integrity": "sha512-hEQt0+ZLDVUMhebKxL4x1BTtDY7bavVofhZ9KZ4aI26X9SRaE+Y3m83XUL1UP2jn8ynjndwCCpEHdUG+9pP1Tw==",
       "dev": true
     },
     "universalify": {
diff --git a/package.json b/package.json
index 71af3a0f..d9ceef22 100644
--- a/package.json
+++ b/package.json
@@ -43,7 +43,7 @@
     "highlight.js": "~9.12.0",
     "jison": "~0.4.18",
     "markdown-it": "~8.4.0",
-    "underscore": "~1.8.3"
+    "underscore": "~1.12.1"
   },
   "dependencies": {
     "iced-runtime-3": ">=3.0.4"