diff --git a/package-lock.json b/package-lock.json
index aaee67e0f39e5..18914349c0829 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -10508,9 +10508,9 @@
       }
     },
     "underscore": {
-      "version": "1.9.2",
-      "resolved": "https://registry.npmjs.org/underscore/-/underscore-1.9.2.tgz",
-      "integrity": "sha512-D39qtimx0c1fI3ya1Lnhk3E9nONswSKhnffBI0gME9C99fYOkNi04xs8K6pePLhvl1frbDemkaBQ5ikWllR2HQ=="
+      "version": "1.13.8",
+      "resolved": "https://registry.npmjs.org/underscore/-/underscore-1.13.8.tgz",
+      "integrity": "sha512-DXtD3ZtEQzc7M8m4cXotyHR+FAS18C64asBYY5vqZexfYryNNnDc02W4hKg3rdQuqOYas1jkseX0+nZXjTXnvQ=="
     },
     "unicode-canonical-property-names-ecmascript": {
       "version": "1.0.4",
diff --git a/package.json b/package.json
index 2c88693b9864d..e7d19f0b735a0 100644
--- a/package.json
+++ b/package.json
@@ -65,7 +65,7 @@
     "snap.js": "^2.0.9",
     "strengthify": "git+https://github.com/MorrisJobke/strengthify.git#0.5.8",
     "toastify-js": "^1.6.2",
-    "underscore": "^1.9.2",
+    "underscore": "^1.13.8",
     "url-search-params-polyfill": "^7.0.1",
     "v-tooltip": "^2.0.2",
     "vue": "^2.6.11",