diff --git a/server/package-lock.json b/server/package-lock.json
index 68a755e..6646f0f 100644
--- a/server/package-lock.json
+++ b/server/package-lock.json
@@ -3515,9 +3515,9 @@
       "integrity": "sha1-SDEm4Rd03y9xuLY53NeZw3YWK4I="
     },
     "underscore": {
-      "version": "1.5.2",
-      "resolved": "https://registry.npmjs.org/underscore/-/underscore-1.5.2.tgz",
-      "integrity": "sha1-EzXF5PXm0zu7SwBrqMhqAPVW3gg="
+      "version": "1.12.1",
+      "resolved": "https://registry.npmjs.org/underscore/-/underscore-1.12.1.tgz",
+      "integrity": "sha512-hEQt0+ZLDVUMhebKxL4x1BTtDY7bavVofhZ9KZ4aI26X9SRaE+Y3m83XUL1UP2jn8ynjndwCCpEHdUG+9pP1Tw=="
     },
     "unpipe": {
       "version": "1.0.0",
diff --git a/server/package.json b/server/package.json
index 7d92eff..ded694c 100644
--- a/server/package.json
+++ b/server/package.json
@@ -34,7 +34,7 @@
     "socket.io": "*",
     "stripe": "^2.5.2",
     "stylus": "*",
-    "underscore": "~1.5.2"
+    "underscore": "~1.12.1"
   },
   "devDependencies": {
     "babel-core": "^6.26.3",