diff --git a/package-lock.json b/package-lock.json
index b70e9fe13..093903cb5 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -19,7 +19,7 @@
         "mousetrap": "^1.6.5",
         "raphael": "^2.3.0",
         "sortablejs": "^1.15.2",
-        "underscore": "^1.13.4",
+        "underscore": "^1.13.8",
         "vite-plugin-html-inject": "^1.1.2"
       },
       "devDependencies": {
@@ -1333,9 +1333,10 @@
       }
     },
     "node_modules/underscore": {
-      "version": "1.13.4",
-      "resolved": "https://registry.npmjs.org/underscore/-/underscore-1.13.4.tgz",
-      "integrity": "sha512-BQFnUDuAQ4Yf/cYY5LNrK9NCJFKriaRbD9uR1fTeXnBeoa97W0i41qkZfGO9pSo8I5KzjAcSY2XYtdf0oKd7KQ=="
+      "version": "1.13.8",
+      "resolved": "https://registry.npmjs.org/underscore/-/underscore-1.13.8.tgz",
+      "integrity": "sha512-DXtD3ZtEQzc7M8m4cXotyHR+FAS18C64asBYY5vqZexfYryNNnDc02W4hKg3rdQuqOYas1jkseX0+nZXjTXnvQ==",
+      "license": "MIT"
     },
     "node_modules/vite": {
       "version": "6.4.1",
diff --git a/package.json b/package.json
index 8bc6dea97..07f1f1ada 100644
--- a/package.json
+++ b/package.json
@@ -41,7 +41,7 @@
     "mousetrap": "^1.6.5",
     "raphael": "^2.3.0",
     "sortablejs": "^1.15.2",
-    "underscore": "^1.13.4",
+    "underscore": "^1.13.8",
     "vite-plugin-html-inject": "^1.1.2"
   }
 }