diff --git a/package-lock.json b/package-lock.json
index 934c924cabe..3fe031c4fc8 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -70,7 +70,7 @@
         "snap.js": "^2.0.9",
         "strengthify": "github:nextcloud/strengthify#0.5.9",
         "throttle-debounce": "^5.0.2",
-        "underscore": "1.13.7",
+        "underscore": "1.13.8",
         "url-search-params-polyfill": "^8.2.5",
         "v-click-outside": "^3.2.0",
         "v-tooltip": "^2.1.3",
@@ -26188,10 +26188,9 @@
       }
     },
     "node_modules/underscore": {
-      "version": "1.13.7",
-      "resolved": "https://registry.npmjs.org/underscore/-/underscore-1.13.7.tgz",
-      "integrity": "sha512-GMXzWtsc57XAtguZgaQViUOzs0KTkk8ojr3/xAxXLITqf/3EMwxC0inyETfDFjH/Krbhuep0HNbbjI9i/q3F3g==",
-      "license": "MIT"
+      "version": "1.13.8",
+      "resolved": "https://registry.npmjs.org/underscore/-/underscore-1.13.8.tgz",
+      "integrity": "sha512-DXtD3ZtEQzc7M8m4cXotyHR+FAS18C64asBYY5vqZexfYryNNnDc02W4hKg3rdQuqOYas1jkseX0+nZXjTXnvQ=="
     },
     "node_modules/undici": {
       "version": "6.23.0",
diff --git a/package.json b/package.json
index 0ac6e5b3e14..a796295a4ed 100644
--- a/package.json
+++ b/package.json
@@ -99,7 +99,7 @@
     "snap.js": "^2.0.9",
     "strengthify": "github:nextcloud/strengthify#0.5.9",
     "throttle-debounce": "^5.0.2",
-    "underscore": "1.13.7",
+    "underscore": "1.13.8",
     "url-search-params-polyfill": "^8.2.5",
     "v-click-outside": "^3.2.0",
     "v-tooltip": "^2.1.3",