diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index d018ed6f634..42ddca9e3e2 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -276,8 +276,8 @@ importers:
         specifier: ^5.0.23
         version: 5.0.23
       underscore:
-        specifier: 1.13.7
-        version: 1.13.7
+        specifier: 1.13.8
+        version: 1.13.8
       unorm:
         specifier: 1.6.0
         version: 1.6.0
@@ -4820,8 +4820,8 @@ packages:
     resolution: {integrity: sha512-nWJ91DjeOkej/TA8pXQ3myruKpKEYgqvpw9lz4OPHj/NWFNluYrjbz9j01CJ8yKQd2g4jFoOkINCTW2I5LEEyw==}
     engines: {node: '>= 0.4'}
 
-  underscore@1.13.7:
-    resolution: {integrity: sha512-GMXzWtsc57XAtguZgaQViUOzs0KTkk8ojr3/xAxXLITqf/3EMwxC0inyETfDFjH/Krbhuep0HNbbjI9i/q3F3g==}
+  underscore@1.13.8:
+    resolution: {integrity: sha512-DXtD3ZtEQzc7M8m4cXotyHR+FAS18C64asBYY5vqZexfYryNNnDc02W4hKg3rdQuqOYas1jkseX0+nZXjTXnvQ==}
 
   undici-types@7.16.0:
     resolution: {integrity: sha512-Zz+aZWSj8LE6zoxD+xrjh4VfkIG8Ya6LvYkZqtUQGJPZjYl53ypCaUwWqo7eI0x66KBGeRo+mlBEkMSeSZ38Nw==}
@@ -9830,7 +9830,7 @@ snapshots:
       has-symbols: 1.1.0
       which-boxed-primitive: 1.1.1
 
-  underscore@1.13.7: {}
+  underscore@1.13.8: {}
 
   undici-types@7.16.0: {}
 
diff --git a/src/package.json b/src/package.json
index 29dc244f59e..08962045cd8 100644
--- a/src/package.json
+++ b/src/package.json
@@ -74,7 +74,7 @@
     "tinycon": "0.6.8",
     "tsx": "4.21.0",
     "ueberdb2": "^5.0.23",
-    "underscore": "1.13.7",
+    "underscore": "1.13.8",
     "unorm": "1.6.0",
     "wtfnode": "^0.10.1"
   },