diff --git a/package-lock.json b/package-lock.json
index d4c3534a7e71..33526204397d 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -3802,6 +3802,11 @@
             "samsam": "1.1.2",
             "util": ">=0.10.3 <1"
           }
+        },
+        "underscore": {
+          "version": "1.8.3",
+          "resolved": "https://registry.npmjs.org/underscore/-/underscore-1.8.3.tgz",
+          "integrity": "sha1-Tz+1OxBuYJf8+ctBCfKl6b36UCI="
         }
       }
     },
@@ -14752,9 +14757,9 @@
       "dev": true
     },
     "underscore": {
-      "version": "1.8.3",
-      "resolved": "https://registry.npmjs.org/underscore/-/underscore-1.8.3.tgz",
-      "integrity": "sha1-Tz+1OxBuYJf8+ctBCfKl6b36UCI="
+      "version": "1.12.1",
+      "resolved": "https://registry.npmjs.org/underscore/-/underscore-1.12.1.tgz",
+      "integrity": "sha512-hEQt0+ZLDVUMhebKxL4x1BTtDY7bavVofhZ9KZ4aI26X9SRaE+Y3m83XUL1UP2jn8ynjndwCCpEHdUG+9pP1Tw=="
     },
     "underscore.string": {
       "version": "3.3.5",
diff --git a/package.json b/package.json
index b3a737ef6cce..1bb88106eb30 100644
--- a/package.json
+++ b/package.json
@@ -59,7 +59,7 @@
     "style-loader": "0.18.2",
     "svg-inline-loader": "0.8.0",
     "uglify-js": "2.7.0",
-    "underscore": "1.8.3",
+    "underscore": "1.12.1",
     "underscore.string": "3.3.5",
     "webpack": "2.7.0",
     "webpack-bundle-tracker": "0.2.1",