diff --git a/package-lock.json b/package-lock.json
index 03813da5..a5f5072f 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -16,7 +16,7 @@
         "lessc": "^1.0.2",
         "pandoc-filter": "0.1.6",
         "uglifyify": "2.6.0",
-        "underscore": "1.7.0"
+        "underscore": "1.12.1"
       }
     },
     "node_modules/ajv": {
@@ -934,9 +934,9 @@
       "dev": true
     },
     "node_modules/underscore": {
-      "version": "1.7.0",
-      "resolved": "https://registry.npmjs.org/underscore/-/underscore-1.7.0.tgz",
-      "integrity": "sha1-a7rwh3UA02vjTsqlhODbn+8DUgk=",
+      "version": "1.12.1",
+      "resolved": "https://registry.npmjs.org/underscore/-/underscore-1.12.1.tgz",
+      "integrity": "sha512-hEQt0+ZLDVUMhebKxL4x1BTtDY7bavVofhZ9KZ4aI26X9SRaE+Y3m83XUL1UP2jn8ynjndwCCpEHdUG+9pP1Tw==",
       "dev": true
     },
     "node_modules/uri-js": {
@@ -1755,9 +1755,9 @@
       }
     },
     "underscore": {
-      "version": "1.7.0",
-      "resolved": "https://registry.npmjs.org/underscore/-/underscore-1.7.0.tgz",
-      "integrity": "sha1-a7rwh3UA02vjTsqlhODbn+8DUgk=",
+      "version": "1.12.1",
+      "resolved": "https://registry.npmjs.org/underscore/-/underscore-1.12.1.tgz",
+      "integrity": "sha512-hEQt0+ZLDVUMhebKxL4x1BTtDY7bavVofhZ9KZ4aI26X9SRaE+Y3m83XUL1UP2jn8ynjndwCCpEHdUG+9pP1Tw==",
       "dev": true
     },
     "uri-js": {
diff --git a/package.json b/package.json
index 4287edb5..1ea2d5c3 100644
--- a/package.json
+++ b/package.json
@@ -13,7 +13,7 @@
     "jquery": "3.5.0",
     "uglifyify": "2.6.0",
     "lessc": "^1.0.2",
-    "underscore": "1.7.0",
+    "underscore": "1.12.1",
     "pandoc-filter": "0.1.6",
     "coffeescript": "^2.5.1"
   },
diff --git a/yarn.lock b/yarn.lock
index 01eba297..bc1e2176 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -482,9 +482,9 @@ uglifyify@2.6.0:
     through "~2.3.4"
     uglify-js "2.x.x"
 
-underscore@1.7.0:
-  version "1.7.0"
-  resolved "https://registry.npmjs.org/underscore/-/underscore-1.7.0.tgz"
+underscore@1.12.1:
+  version "1.12.1"
+  resolved "https://registry.yarnpkg.com/underscore/-/underscore-1.12.1.tgz#7bb8cc9b3d397e201cf8553336d262544ead829e"
 
 uri-js@^4.2.2:
   version "4.2.2"