diff --git a/experiments/package-lock.json b/experiments/package-lock.json
index 9e36250..07b7f05 100644
--- a/experiments/package-lock.json
+++ b/experiments/package-lock.json
@@ -639,9 +639,9 @@
       }
     },
     "underscore": {
-      "version": "1.7.0",
-      "resolved": "https://registry.npmjs.org/underscore/-/underscore-1.7.0.tgz",
-      "integrity": "sha1-a7rwh3UA02vjTsqlhODbn+8DUgk="
+      "version": "1.12.1",
+      "resolved": "https://registry.npmjs.org/underscore/-/underscore-1.12.1.tgz",
+      "integrity": "sha512-hEQt0+ZLDVUMhebKxL4x1BTtDY7bavVofhZ9KZ4aI26X9SRaE+Y3m83XUL1UP2jn8ynjndwCCpEHdUG+9pP1Tw=="
     },
     "unpipe": {
       "version": "1.0.0",
diff --git a/experiments/package.json b/experiments/package.json
index 4382246..77f0151 100644
--- a/experiments/package.json
+++ b/experiments/package.json
@@ -9,6 +9,6 @@
     "jsonfile": "~2.4.0",
     "node-uuid": "1.4.8",
     "socket.io": "~2.4.0",
-    "underscore": "~1.7.0"
+    "underscore": "~1.12.1"
   }
 }