diff --git a/package.json b/package.json
index 204ddded..4a1e3031 100644
--- a/package.json
+++ b/package.json
@@ -82,7 +82,7 @@
     "tmp-promise": "^1.0.3",
     "trie-search": "^1.0.0",
     "umzug": "^2.2.0",
-    "underscore": "^1.8.0",
+    "underscore": "^1.13.8",
     "uuid": "^3.2.1",
     "validator": "^13.15.20",
     "value-event": "^5.1.1",
diff --git a/yarn.lock b/yarn.lock
index 9a83cc81..a569d90d 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -7705,10 +7705,10 @@ undeclared-identifiers@^1.1.2:
     simple-concat "^1.0.0"
     xtend "^4.0.1"
 
-underscore@^1.8.0:
-  version "1.9.1"
-  resolved "https://registry.yarnpkg.com/underscore/-/underscore-1.9.1.tgz#06dce34a0e68a7babc29b365b8e74b8925203961"
-  integrity sha512-5/4etnCkd9c8gwgowi5/om/mYO5ajCaOgdzj/oW+0eQV9WxKBDZw5+ycmKmeaTXjInS/W0BzpGLo2xR2aBwZdg==
+underscore@^1.13.8:
+  version "1.13.8"
+  resolved "https://registry.yarnpkg.com/underscore/-/underscore-1.13.8.tgz#a93a21186c049dbf0e847496dba72b7bd8c1e92b"
+  integrity sha512-DXtD3ZtEQzc7M8m4cXotyHR+FAS18C64asBYY5vqZexfYryNNnDc02W4hKg3rdQuqOYas1jkseX0+nZXjTXnvQ==
 
 unicode-canonical-property-names-ecmascript@^1.0.4:
   version "1.0.4"