diff --git a/package-lock.json b/package-lock.json
index 55407ed..c6ba46d 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -28,7 +28,7 @@
         "password-hash": "1.2.1",
         "socket.io": "^0.9.19",
         "textile-js": "2.1.1",
-        "underscore": "1.3.3",
+        "underscore": "1.12.1",
         "yaml-config": "0.3.0"
       },
       "engines": {
@@ -1589,12 +1589,9 @@
       "integrity": "sha1-SDEm4Rd03y9xuLY53NeZw3YWK4I="
     },
     "node_modules/underscore": {
-      "version": "1.3.3",
-      "resolved": "https://registry.npmjs.org/underscore/-/underscore-1.3.3.tgz",
-      "integrity": "sha1-R6xTaD2vgyv6lS4XdEF9pHgXrkI=",
-      "engines": {
-        "node": "*"
-      }
+      "version": "1.12.1",
+      "resolved": "https://registry.npmjs.org/underscore/-/underscore-1.12.1.tgz",
+      "integrity": "sha512-hEQt0+ZLDVUMhebKxL4x1BTtDY7bavVofhZ9KZ4aI26X9SRaE+Y3m83XUL1UP2jn8ynjndwCCpEHdUG+9pP1Tw=="
     },
     "node_modules/underscore.string": {
       "version": "2.4.0",
@@ -3016,9 +3013,9 @@
       "integrity": "sha1-SDEm4Rd03y9xuLY53NeZw3YWK4I="
     },
     "underscore": {
-      "version": "1.3.3",
-      "resolved": "https://registry.npmjs.org/underscore/-/underscore-1.3.3.tgz",
-      "integrity": "sha1-R6xTaD2vgyv6lS4XdEF9pHgXrkI="
+      "version": "1.12.1",
+      "resolved": "https://registry.npmjs.org/underscore/-/underscore-1.12.1.tgz",
+      "integrity": "sha512-hEQt0+ZLDVUMhebKxL4x1BTtDY7bavVofhZ9KZ4aI26X9SRaE+Y3m83XUL1UP2jn8ynjndwCCpEHdUG+9pP1Tw=="
     },
     "underscore.string": {
       "version": "2.4.0",
diff --git a/package.json b/package.json
index e7358e2..39bb63f 100644
--- a/package.json
+++ b/package.json
@@ -29,7 +29,7 @@
     "textile-js": "2.1.1",
     "markdown": "0.5.0",
     "markdown-it": "12.2.0",
-    "underscore": "1.3.3",
+    "underscore": "1.12.1",
     "yaml-config": "0.3.0",
     "@octokit/auth-app": "3.6.0"
   }