diff --git a/package-lock.json b/package-lock.json
index 3368a2c..415d264 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -6649,9 +6649,9 @@
       }
     },
     "underscore": {
-      "version": "1.8.3",
-      "resolved": "https://registry.npmjs.org/underscore/-/underscore-1.8.3.tgz",
-      "integrity": "sha1-Tz+1OxBuYJf8+ctBCfKl6b36UCI="
+      "version": "1.12.1",
+      "resolved": "https://registry.npmjs.org/underscore/-/underscore-1.12.1.tgz",
+      "integrity": "sha512-hEQt0+ZLDVUMhebKxL4x1BTtDY7bavVofhZ9KZ4aI26X9SRaE+Y3m83XUL1UP2jn8ynjndwCCpEHdUG+9pP1Tw=="
     },
     "underscore.string": {
       "version": "3.3.5",
diff --git a/package.json b/package.json
index 047e269..9e30744 100644
--- a/package.json
+++ b/package.json
@@ -27,7 +27,7 @@
     "lambda-git": "^0.1.1",
     "moment": "^2.21.0",
     "snyk": "^1.143.1",
-    "underscore": "^1.8.3",
+    "underscore": "^1.12.1",
     "underscore.string": "^3.3.5"
   },
   "devDependencies": {