diff --git a/pkgs/replbox/package.json b/pkgs/replbox/package.json
index 33d6ff0f..107ae96c 100644
--- a/pkgs/replbox/package.json
+++ b/pkgs/replbox/package.json
@@ -15,7 +15,7 @@
   "dependencies": {
     "argparse": "^2.0.1",
     "biwascheme": "^0.7.5",
-    "underscore": "1.2.2"
+    "underscore": "1.13.8"
   },
   "prettier": {
     "trailingComma": "all",
diff --git a/pkgs/replbox/yarn.lock b/pkgs/replbox/yarn.lock
index 77729737..52c03b13 100644
--- a/pkgs/replbox/yarn.lock
+++ b/pkgs/replbox/yarn.lock
@@ -24,7 +24,7 @@ prettier@^1.18.2:
   resolved "https://registry.yarnpkg.com/prettier/-/prettier-1.19.1.tgz#f7d7f5ff8a9cd872a7be4ca142095956a60797cb"
   integrity sha512-s7PoyDv/II1ObgQunCbB9PdLmUcBZcnWOcxDh7O0N/UwDEsHyqkW+Qh28jW+mVuCdx7gLB0BotYI1Y6uI9iyew==
 
-underscore@1.2.2:
-  version "1.2.2"
-  resolved "https://registry.yarnpkg.com/underscore/-/underscore-1.2.2.tgz#74dd40e9face84e724eb2edae945b8aedc233ba3"
-  integrity sha1-dN1A6frOhOck6y7a6UW4rtwjO6M=
+underscore@1.13.8:
+  version "1.13.8"
+  resolved "https://registry.yarnpkg.com/underscore/-/underscore-1.13.8.tgz#a93a21186c049dbf0e847496dba72b7bd8c1e92b"
+  integrity sha512-DXtD3ZtEQzc7M8m4cXotyHR+FAS18C64asBYY5vqZexfYryNNnDc02W4hKg3rdQuqOYas1jkseX0+nZXjTXnvQ==