diff --git a/package-lock.json b/package-lock.json
index 73c2d46..cb0c720 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1731,9 +1731,9 @@
             "integrity": "sha1-WuaBd/GS1EViadEIr6k/+HQ/T2Q="
         },
         "underscore": {
-            "version": "1.6.0",
-            "resolved": "https://registry.npmjs.org/underscore/-/underscore-1.6.0.tgz",
-            "integrity": "sha1-izixDKze9jM3uLJOT/htRa6lKag="
+            "version": "1.12.1",
+            "resolved": "https://registry.npmjs.org/underscore/-/underscore-1.12.1.tgz",
+            "integrity": "sha512-hEQt0+ZLDVUMhebKxL4x1BTtDY7bavVofhZ9KZ4aI26X9SRaE+Y3m83XUL1UP2jn8ynjndwCCpEHdUG+9pP1Tw=="
         },
         "uri-js": {
             "version": "4.2.2",
diff --git a/package.json b/package.json
index e2a0d3c..f79f4ba 100644
--- a/package.json
+++ b/package.json
@@ -19,7 +19,7 @@
         "email": "info@mapbox.com"
     },
     "dependencies": {
-        "underscore": "~1.6.0",
+        "underscore": "~1.12.1",
         "step": "~0.0.5",
         "generic-pool": "~2.4.1",
         "request": "2.x",