diff --git a/package.json b/package.json
index e7fbbe1..a8b8375 100644
--- a/package.json
+++ b/package.json
@@ -49,7 +49,7 @@
     "redux": "3.5.2",
     "redux-thunk": "2.1.0",
     "throng": "4.0.0",
-    "underscore": "1.8.3",
+    "underscore": "1.12.1",
     "zulip-js": "git+https://github.com/zulip/zulip-js.git"
   },
   "devDependencies": {
diff --git a/yarn.lock b/yarn.lock
index 0e8a341..c144c0c 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -4851,9 +4851,9 @@ ultron@~1.1.0:
   version "1.1.1"
   resolved "https://registry.yarnpkg.com/ultron/-/ultron-1.1.1.tgz#9fe1536a10a664a65266a1e3ccf85fd36302bc9c"
 
-underscore@1.8.3:
-  version "1.8.3"
-  resolved "https://registry.yarnpkg.com/underscore/-/underscore-1.8.3.tgz#4f3fb53b106e6097fcf9cb4109f2a5e9bdfa5022"
+underscore@1.12.1:
+  version "1.12.1"
+  resolved "https://registry.yarnpkg.com/underscore/-/underscore-1.12.1.tgz#7bb8cc9b3d397e201cf8553336d262544ead829e"
 
 union-value@^1.0.0:
   version "1.0.0"