diff --git a/package-lock.json b/package-lock.json
index 3806835..f62e8bf 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,6 +1,6 @@
 {
   "name": "s3front",
-  "version": "0.5.0",
+  "version": "0.5.1",
   "lockfileVersion": 1,
   "requires": true,
   "dependencies": {
@@ -259,9 +259,9 @@
       "integrity": "sha1-76/unx4i01ke1949yqlcP1559zw="
     },
     "underscore": {
-      "version": "1.4.4",
-      "resolved": "https://registry.npmjs.org/underscore/-/underscore-1.4.4.tgz",
-      "integrity": "sha1-YaajIBBiKvoHljvzJSA88SI51gQ="
+      "version": "1.12.1",
+      "resolved": "https://registry.npmjs.org/underscore/-/underscore-1.12.1.tgz",
+      "integrity": "sha512-hEQt0+ZLDVUMhebKxL4x1BTtDY7bavVofhZ9KZ4aI26X9SRaE+Y3m83XUL1UP2jn8ynjndwCCpEHdUG+9pP1Tw=="
     },
     "universalify": {
       "version": "0.1.2",
diff --git a/package.json b/package.json
index f415174..1ccb7ad 100644
--- a/package.json
+++ b/package.json
@@ -31,7 +31,7 @@
     "fs-extra": "3.0.1",
     "progress": "^1.1.8",
     "s3": "github:andrewrk/node-s3-client#a1c25dd322bb22617a7255e84369b1e1c0289397",
-    "underscore": "~1.4.4",
+    "underscore": "~1.12.1",
     "uuid": "^8.3.1",
     "wrench": "1.4.4"
   }