diff --git a/package.json b/package.json
index f13936cd4e82c..342e5ae435ece 100644
--- a/package.json
+++ b/package.json
@@ -120,7 +120,7 @@
     "typescript": "2.9.2",
     "typescript-formatter": "7.1.0",
     "uglify-es": "^3.0.18",
-    "underscore": "^1.8.2",
+    "underscore": "^1.12.1",
     "vinyl": "^0.4.5",
     "vinyl-fs": "^2.4.3",
     "vsce": "1.33.2",
diff --git a/yarn.lock b/yarn.lock
index 1d81bc278d272..4396d5b614dcf 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -5833,10 +5833,14 @@ unc-path-regex@^0.1.0:
   version "0.1.2"
   resolved "https://registry.yarnpkg.com/unc-path-regex/-/unc-path-regex-0.1.2.tgz#e73dd3d7b0d7c5ed86fbac6b0ae7d8c6a69d50fa"
 
-underscore@1.8.3, underscore@^1.8.2, underscore@^1.8.3:
+underscore@1.8.3:
   version "1.8.3"
   resolved "https://registry.yarnpkg.com/underscore/-/underscore-1.8.3.tgz#4f3fb53b106e6097fcf9cb4109f2a5e9bdfa5022"
 
+underscore@^1.12.1, underscore@^1.8.3:
+  version "1.12.1"
+  resolved "https://registry.yarnpkg.com/underscore/-/underscore-1.12.1.tgz#7bb8cc9b3d397e201cf8553336d262544ead829e"
+
 underscore@~1.4.4:
   version "1.4.4"
   resolved "https://registry.yarnpkg.com/underscore/-/underscore-1.4.4.tgz#61a6a32010622afa07963bf325203cf12239d604"