diff --git a/static/package.json b/static/package.json
index 764c737b..5a02d1ec 100644
--- a/static/package.json
+++ b/static/package.json
@@ -45,7 +45,7 @@
     "sortablejs": "^1.6.0",
     "spectre.css": "^0.2.14",
     "typed.js": "^2.0.2",
-    "underscore": "^1.8.3",
+    "underscore": "^1.12.1",
     "vue": "^2.4.1",
     "vuedraggable": "^2.14.1"
   }
diff --git a/static/yarn.lock b/static/yarn.lock
index 15f85e79..606e9547 100644
--- a/static/yarn.lock
+++ b/static/yarn.lock
@@ -3564,10 +3564,10 @@ unc-path-regex@^0.1.2:
   resolved "https://registry.yarnpkg.com/unc-path-regex/-/unc-path-regex-0.1.2.tgz#e73dd3d7b0d7c5ed86fbac6b0ae7d8c6a69d50fa"
   integrity sha1-5z3T17DXxe2G+6xrCufYxqadUPo=
 
-underscore@^1.8.3:
-  version "1.9.2"
-  resolved "https://registry.yarnpkg.com/underscore/-/underscore-1.9.2.tgz#0c8d6f536d6f378a5af264a72f7bec50feb7cf2f"
-  integrity sha512-D39qtimx0c1fI3ya1Lnhk3E9nONswSKhnffBI0gME9C99fYOkNi04xs8K6pePLhvl1frbDemkaBQ5ikWllR2HQ==
+underscore@^1.12.1:
+  version "1.12.1"
+  resolved "https://registry.yarnpkg.com/underscore/-/underscore-1.12.1.tgz#7bb8cc9b3d397e201cf8553336d262544ead829e"
+  integrity sha512-hEQt0+ZLDVUMhebKxL4x1BTtDY7bavVofhZ9KZ4aI26X9SRaE+Y3m83XUL1UP2jn8ynjndwCCpEHdUG+9pP1Tw==
 
 union-value@^1.0.0:
   version "1.0.1"