diff --git a/package.json b/package.json
index d88d96edabbac8..6cce6777ebadd3 100644
--- a/package.json
+++ b/package.json
@@ -62,7 +62,7 @@
     "sprintf-js": "1.0.3",
     "style-loader": "0.12.4",
     "u2f-api": "0.0.8",
-    "underscore": "1.8.3",
+    "underscore": "1.12.1",
     "url-loader": "0.5.6",
     "webpack": "2.2.0",
     "webpack-dev-middleware": "1.9.0"
diff --git a/yarn.lock b/yarn.lock
index b5475eb72092dc..1bf706837f876b 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -5371,9 +5371,9 @@ uncontrollable@^3.2.3:
   dependencies:
     invariant "^2.1.0"
 
-underscore@1.8.3:
-  version "1.8.3"
-  resolved "https://registry.yarnpkg.com/underscore/-/underscore-1.8.3.tgz#4f3fb53b106e6097fcf9cb4109f2a5e9bdfa5022"
+underscore@1.12.1:
+  version "1.12.1"
+  resolved "https://registry.yarnpkg.com/underscore/-/underscore-1.12.1.tgz#7bb8cc9b3d397e201cf8553336d262544ead829e"
 
 uniq@^1.0.1:
   version "1.0.1"