diff --git a/src/package-lock.json b/src/package-lock.json
index 6e70f432c..4748f79d0 100644
--- a/src/package-lock.json
+++ b/src/package-lock.json
@@ -8604,9 +8604,9 @@
       }
     },
     "underscore": {
-      "version": "1.13.1",
-      "resolved": "https://registry.npmjs.org/underscore/-/underscore-1.13.1.tgz",
-      "integrity": "sha512-hzSoAVtJF+3ZtiFX0VgfFPHEDRm7Y/QPjGyNo4TVdnDTdft3tr8hEkD25a1jC+TjTuE7tkHGKkhwCgs9dgBB2g=="
+      "version": "1.13.6",
+      "resolved": "https://registry.npmjs.org/underscore/-/underscore-1.13.6.tgz",
+      "integrity": "sha512-+A5Sja4HP1M08MaXya7p5LvjuM7K6q/2EaC0+iovj/wOcMsTzMvDFbasi/oSapiwOlt252IqsKqPjCl7huKS0A=="
     },
     "unified": {
       "version": "9.2.2",
diff --git a/src/package.json b/src/package.json
index c8b4e3408..ea35c35b4 100644
--- a/src/package.json
+++ b/src/package.json
@@ -68,7 +68,7 @@
     "tiny-worker": "^2.3.0",
     "tinycon": "0.6.8",
     "ueberdb2": "^2.2.4",
-    "underscore": "1.13.1",
+    "underscore": "1.13.6",
     "unorm": "1.6.0",
     "wtfnode": "^0.9.1"
   },