diff --git a/package-lock.json b/package-lock.json
index e2ebad0..1cf53cd 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -5934,7 +5934,7 @@
       "dependencies": {
         "lru-cache": {
           "version": "2.5.0",
-          "resolved": "http://registry.npmjs.org/lru-cache/-/lru-cache-2.5.0.tgz",
+          "resolved": "https://registry.npmjs.org/lru-cache/-/lru-cache-2.5.0.tgz",
           "integrity": "sha1-2COIrpyWC+y+oMc7uet5tsbOmus="
         }
       }
@@ -8722,9 +8722,9 @@
       }
     },
     "underscore": {
-      "version": "1.8.3",
-      "resolved": "https://registry.npmjs.org/underscore/-/underscore-1.8.3.tgz",
-      "integrity": "sha1-Tz+1OxBuYJf8+ctBCfKl6b36UCI="
+      "version": "1.12.1",
+      "resolved": "https://registry.npmjs.org/underscore/-/underscore-1.12.1.tgz",
+      "integrity": "sha512-hEQt0+ZLDVUMhebKxL4x1BTtDY7bavVofhZ9KZ4aI26X9SRaE+Y3m83XUL1UP2jn8ynjndwCCpEHdUG+9pP1Tw=="
     },
     "union-value": {
       "version": "1.0.1",
diff --git a/package.json b/package.json
index c588c28..d95bf6c 100644
--- a/package.json
+++ b/package.json
@@ -43,7 +43,7 @@
     "passport-localapikey": "0.0.3",
     "pondjs": "^0.9.0",
     "tracer": "0.8.7",
-    "underscore": "1.8.3"
+    "underscore": "1.12.1"
   },
   "devDependencies": {
     "babel-eslint": "9.0.0",