diff --git a/services/track-changes/package-lock.json b/services/track-changes/package-lock.json
index fd8814cb0f..40e0b654b4 100644
--- a/services/track-changes/package-lock.json
+++ b/services/track-changes/package-lock.json
@@ -7054,9 +7054,9 @@
       "dev": true
     },
     "underscore": {
-      "version": "1.9.2",
-      "resolved": "https://registry.npmjs.org/underscore/-/underscore-1.9.2.tgz",
-      "integrity": "sha512-D39qtimx0c1fI3ya1Lnhk3E9nONswSKhnffBI0gME9C99fYOkNi04xs8K6pePLhvl1frbDemkaBQ5ikWllR2HQ=="
+      "version": "1.13.1",
+      "resolved": "https://registry.npmjs.org/underscore/-/underscore-1.13.1.tgz",
+      "integrity": "sha512-hzSoAVtJF+3ZtiFX0VgfFPHEDRm7Y/QPjGyNo4TVdnDTdft3tr8hEkD25a1jC+TjTuE7tkHGKkhwCgs9dgBB2g=="
     },
     "unpipe": {
       "version": "1.0.0",
diff --git a/services/track-changes/package.json b/services/track-changes/package.json
index 2aa031f310..805610ad5e 100644
--- a/services/track-changes/package.json
+++ b/services/track-changes/package.json
@@ -38,7 +38,7 @@
     "requestretry": "^4.1.0",
     "s3-streams": "^0.4.0",
     "settings-sharelatex": "^1.1.0",
-    "underscore": "~1.9.2"
+    "underscore": "~1.13.1"
   },
   "devDependencies": {
     "babel-eslint": "^10.1.0",