diff --git a/services/docstore/package-lock.json b/services/docstore/package-lock.json
index cc607bfcb1..868ea78aaa 100644
--- a/services/docstore/package-lock.json
+++ b/services/docstore/package-lock.json
@@ -7066,9 +7066,9 @@
       "dev": true
     },
     "underscore": {
-      "version": "1.10.2",
-      "resolved": "https://registry.npmjs.org/underscore/-/underscore-1.10.2.tgz",
-      "integrity": "sha512-N4P+Q/BuyuEKFJ43B9gYuOj4TQUHXX+j2FqguVOpjkssLUUrnJofCcBccJSCoeturDoZU6GorDTHSvUDlSQbTg=="
+      "version": "1.12.1",
+      "resolved": "https://registry.npmjs.org/underscore/-/underscore-1.12.1.tgz",
+      "integrity": "sha512-hEQt0+ZLDVUMhebKxL4x1BTtDY7bavVofhZ9KZ4aI26X9SRaE+Y3m83XUL1UP2jn8ynjndwCCpEHdUG+9pP1Tw=="
     },
     "unique-string": {
       "version": "2.0.0",
diff --git a/services/docstore/package.json b/services/docstore/package.json
index b919a100e9..f85c21673f 100644
--- a/services/docstore/package.json
+++ b/services/docstore/package.json
@@ -32,7 +32,7 @@
     "request": "^2.88.2",
     "settings-sharelatex": "^1.1.0",
     "streamifier": "^0.1.1",
-    "underscore": "~1.10.2"
+    "underscore": "~1.12.1"
   },
   "devDependencies": {
     "@google-cloud/storage": "^5.1.2",