diff --git a/package-lock.json b/package-lock.json
index be114e7ef684a..ca91881deb7f1 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -64,7 +64,7 @@
         "snap.js": "^2.0.9",
         "stream-browserify": "^3.0.0",
         "strengthify": "github:nextcloud/strengthify#0.5.9",
-        "underscore": "1.12.0",
+        "underscore": "1.13.4",
         "url-search-params-polyfill": "^8.1.1",
         "v-click-outside": "^3.1.2",
         "v-tooltip": "^2.1.3",
@@ -21187,12 +21187,6 @@
         "node": ">=12.0.0"
       }
     },
-    "node_modules/jsdoc/node_modules/underscore": {
-      "version": "1.13.2",
-      "resolved": "https://registry.npmjs.org/underscore/-/underscore-1.13.2.tgz",
-      "integrity": "sha512-ekY1NhRzq0B08g4bGuX4wd2jZx5GnKz6mKSqFL4nqBlfyMGiG10gDFhDTMEfYmDL6Jy0FUIZp7wiRB+0BP7J2g==",
-      "dev": true
-    },
     "node_modules/jsdom": {
       "version": "19.0.0",
       "resolved": "https://registry.npmjs.org/jsdom/-/jsdom-19.0.0.tgz",
@@ -30229,9 +30223,9 @@
       }
     },
     "node_modules/underscore": {
-      "version": "1.12.0",
-      "resolved": "https://registry.npmjs.org/underscore/-/underscore-1.12.0.tgz",
-      "integrity": "sha512-21rQzss/XPMjolTiIezSu3JAjgagXKROtNrYFEOWK109qY1Uv2tVjPTZ1ci2HgvQDA16gHYSthQIJfB+XId/rQ=="
+      "version": "1.13.4",
+      "resolved": "https://registry.npmjs.org/underscore/-/underscore-1.13.4.tgz",
+      "integrity": "sha512-BQFnUDuAQ4Yf/cYY5LNrK9NCJFKriaRbD9uR1fTeXnBeoa97W0i41qkZfGO9pSo8I5KzjAcSY2XYtdf0oKd7KQ=="
     },
     "node_modules/unicode-canonical-property-names-ecmascript": {
       "version": "2.0.0",
@@ -48393,14 +48387,6 @@
         "strip-json-comments": "^3.1.0",
         "taffydb": "2.6.2",
         "underscore": "~1.13.2"
-      },
-      "dependencies": {
-        "underscore": {
-          "version": "1.13.2",
-          "resolved": "https://registry.npmjs.org/underscore/-/underscore-1.13.2.tgz",
-          "integrity": "sha512-ekY1NhRzq0B08g4bGuX4wd2jZx5GnKz6mKSqFL4nqBlfyMGiG10gDFhDTMEfYmDL6Jy0FUIZp7wiRB+0BP7J2g==",
-          "dev": true
-        }
       }
     },
     "jsdoc-type-pratt-parser": {
@@ -55496,9 +55482,9 @@
       }
     },
     "underscore": {
-      "version": "1.12.0",
-      "resolved": "https://registry.npmjs.org/underscore/-/underscore-1.12.0.tgz",
-      "integrity": "sha512-21rQzss/XPMjolTiIezSu3JAjgagXKROtNrYFEOWK109qY1Uv2tVjPTZ1ci2HgvQDA16gHYSthQIJfB+XId/rQ=="
+      "version": "1.13.4",
+      "resolved": "https://registry.npmjs.org/underscore/-/underscore-1.13.4.tgz",
+      "integrity": "sha512-BQFnUDuAQ4Yf/cYY5LNrK9NCJFKriaRbD9uR1fTeXnBeoa97W0i41qkZfGO9pSo8I5KzjAcSY2XYtdf0oKd7KQ=="
     },
     "unicode-canonical-property-names-ecmascript": {
       "version": "2.0.0",
diff --git a/package.json b/package.json
index b9aca3f9becd0..a7fe651f080e4 100644
--- a/package.json
+++ b/package.json
@@ -84,7 +84,7 @@
     "snap.js": "^2.0.9",
     "stream-browserify": "^3.0.0",
     "strengthify": "github:nextcloud/strengthify#0.5.9",
-    "underscore": "1.12.0",
+    "underscore": "1.13.4",
     "url-search-params-polyfill": "^8.1.1",
     "v-click-outside": "^3.1.2",
     "v-tooltip": "^2.1.3",