diff --git a/test/dummy/package.json b/test/dummy/package.json
index 64b53440..ef521123 100644
--- a/test/dummy/package.json
+++ b/test/dummy/package.json
@@ -19,7 +19,7 @@
     "tiny-slider": "^2.8.8",
     "tippy.js": "^2.6.0",
     "turbolinks": "^5.2.0",
-    "underscore": "^1.9.1",
+    "underscore": "^1.12.1",
     "velocity": "^0.7.2",
     "webpack-bundle-analyzer": "^3.0.2",
     "what-input": "^5.1.2"
diff --git a/test/dummy/yarn.lock b/test/dummy/yarn.lock
index c680c5cf..67c07f71 100644
--- a/test/dummy/yarn.lock
+++ b/test/dummy/yarn.lock
@@ -7205,10 +7205,10 @@ uglifyjs-webpack-plugin@^1.2.7:
     webpack-sources "^1.1.0"
     worker-farm "^1.5.2"
 
-underscore@^1.9.1:
-  version "1.9.1"
-  resolved "https://registry.yarnpkg.com/underscore/-/underscore-1.9.1.tgz#06dce34a0e68a7babc29b365b8e74b8925203961"
-  integrity sha512-5/4etnCkd9c8gwgowi5/om/mYO5ajCaOgdzj/oW+0eQV9WxKBDZw5+ycmKmeaTXjInS/W0BzpGLo2xR2aBwZdg==
+underscore@^1.12.1:
+  version "1.12.1"
+  resolved "https://registry.yarnpkg.com/underscore/-/underscore-1.12.1.tgz#7bb8cc9b3d397e201cf8553336d262544ead829e"
+  integrity sha512-hEQt0+ZLDVUMhebKxL4x1BTtDY7bavVofhZ9KZ4aI26X9SRaE+Y3m83XUL1UP2jn8ynjndwCCpEHdUG+9pP1Tw==
 
 union-value@^1.0.0:
   version "1.0.0"