diff --git a/package.json b/package.json
index 361aa70..7204f75 100644
--- a/package.json
+++ b/package.json
@@ -23,7 +23,7 @@
     "express": "3.21.2",
     "moment": "2.19.3",
     "rollbar": "^2.2.7",
-    "underscore": "^1.8.3",
+    "underscore": "^1.12.1",
     "windshaft": "^3.3.1"
   }
 }
diff --git a/yarn.lock b/yarn.lock
index a189141..4535a25 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -2488,10 +2488,14 @@ uid-safe@~2.0.0:
   dependencies:
     base64-url "1.2.1"
 
-underscore@1.8.3, "underscore@>= 1.0.0", underscore@^1.8.3:
+underscore@1.8.3:
   version "1.8.3"
   resolved "https://registry.yarnpkg.com/underscore/-/underscore-1.8.3.tgz#4f3fb53b106e6097fcf9cb4109f2a5e9bdfa5022"
 
+"underscore@>= 1.0.0", underscore@^1.12.1:
+  version "1.12.1"
+  resolved "https://registry.yarnpkg.com/underscore/-/underscore-1.12.1.tgz#7bb8cc9b3d397e201cf8553336d262544ead829e"
+
 underscore@~1.6.0:
   version "1.6.0"
   resolved "https://registry.yarnpkg.com/underscore/-/underscore-1.6.0.tgz#8b38b10cacdef63337b8b24e4ff86d45aea529a8"