diff --git a/tools/pinus-robot/package.json b/tools/pinus-robot/package.json
index bac5d5ba8..ebc4a7386 100644
--- a/tools/pinus-robot/package.json
+++ b/tools/pinus-robot/package.json
@@ -8,7 +8,7 @@
     "socket.io": "^4.1.3",
     "socket.io-client": "^4.1.3",
     "typescript": "^4.3.5",
-    "underscore": "1.13.4"
+    "underscore": "1.13.8"
   },
   "devDependencies": {
     "@types/node": "^12.20.41",
diff --git a/yarn.lock b/yarn.lock
index 45a972b1f..bcd9a3968 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -9614,10 +9614,10 @@ unbox-primitive@^1.0.1:
     has-symbols "^1.0.2"
     which-boxed-primitive "^1.0.2"
 
-underscore@1.13.4:
-  version "1.13.4"
-  resolved "https://registry.npmjs.org/underscore/-/underscore-1.13.4.tgz"
-  integrity sha512-BQFnUDuAQ4Yf/cYY5LNrK9NCJFKriaRbD9uR1fTeXnBeoa97W0i41qkZfGO9pSo8I5KzjAcSY2XYtdf0oKd7KQ==
+underscore@1.13.8:
+  version "1.13.8"
+  resolved "https://registry.yarnpkg.com/underscore/-/underscore-1.13.8.tgz#a93a21186c049dbf0e847496dba72b7bd8c1e92b"
+  integrity sha512-DXtD3ZtEQzc7M8m4cXotyHR+FAS18C64asBYY5vqZexfYryNNnDc02W4hKg3rdQuqOYas1jkseX0+nZXjTXnvQ==
 
 unicode-length@^1.0.0:
   version "1.0.3"