diff --git a/package.json b/package.json
index b2eb65a041..9cac0bd9d2 100644
--- a/package.json
+++ b/package.json
@@ -20,7 +20,7 @@
     "node-esapi": "0.0.1",
     "serve-favicon": "^2.3.0",
     "swig": "^1.4.2",
-    "underscore": "^1.8.3"
+    "underscore": "^1.13.8"
   },
   "comments": {
     "//": "a9 insecure components"