diff --git a/api/package-lock.json b/api/package-lock.json
index 258eb48..c099439 100644
--- a/api/package-lock.json
+++ b/api/package-lock.json
@@ -8499,9 +8499,9 @@
       }
     },
     "underscore": {
-      "version": "1.9.1",
-      "resolved": "https://registry.npmjs.org/underscore/-/underscore-1.9.1.tgz",
-      "integrity": "sha512-5/4etnCkd9c8gwgowi5/om/mYO5ajCaOgdzj/oW+0eQV9WxKBDZw5+ycmKmeaTXjInS/W0BzpGLo2xR2aBwZdg=="
+      "version": "1.12.1",
+      "resolved": "https://registry.npmjs.org/underscore/-/underscore-1.12.1.tgz",
+      "integrity": "sha512-hEQt0+ZLDVUMhebKxL4x1BTtDY7bavVofhZ9KZ4aI26X9SRaE+Y3m83XUL1UP2jn8ynjndwCCpEHdUG+9pP1Tw=="
     },
     "union-value": {
       "version": "1.0.0",
diff --git a/api/package.json b/api/package.json
index 5ac900b..643611d 100644
--- a/api/package.json
+++ b/api/package.json
@@ -42,7 +42,7 @@
     "response-time": "^2.3.2",
     "showdown": "^1.8.6",
     "spdy": "^4.0.0",
-    "underscore": "^1.9.1",
+    "underscore": "^1.12.1",
     "util": "^0.11.1",
     "uuid": "^3.3.2"
   },