diff --git a/package-lock.json b/package-lock.json
index 8c59bc0..19c20d4 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -9382,9 +9382,9 @@
       "dev": true
     },
     "underscore": {
-      "version": "1.9.2",
-      "resolved": "https://registry.npmjs.org/underscore/-/underscore-1.9.2.tgz",
-      "integrity": "sha512-D39qtimx0c1fI3ya1Lnhk3E9nONswSKhnffBI0gME9C99fYOkNi04xs8K6pePLhvl1frbDemkaBQ5ikWllR2HQ=="
+      "version": "1.12.1",
+      "resolved": "https://registry.npmjs.org/underscore/-/underscore-1.12.1.tgz",
+      "integrity": "sha512-hEQt0+ZLDVUMhebKxL4x1BTtDY7bavVofhZ9KZ4aI26X9SRaE+Y3m83XUL1UP2jn8ynjndwCCpEHdUG+9pP1Tw=="
     },
     "undertaker": {
       "version": "1.2.1",
diff --git a/package.json b/package.json
index 0f5ff2d..2170393 100644
--- a/package.json
+++ b/package.json
@@ -40,7 +40,7 @@
     "passport-google-oauth20": "^2.0.0",
     "passport.socketio": "^3.7.0",
     "socket.io": "^2.3.0",
-    "underscore": "^1.9.2",
+    "underscore": "^1.12.1",
     "web-push": "^3.4.3"
   },
   "devDependencies": {