diff --git a/core/src/test/resources/yarn/yarn-classic-audit/package.json b/core/src/test/resources/yarn/yarn-classic-audit/package.json
index b2fc8eaf8f0..157768b1927 100644
--- a/core/src/test/resources/yarn/yarn-classic-audit/package.json
+++ b/core/src/test/resources/yarn/yarn-classic-audit/package.json
@@ -19,7 +19,7 @@
     "react-dom": "npm:@hot-loader/react-dom",
     "serve-favicon": "^2.3.0",
     "swig": "^1.4.2",
-    "underscore": "^1.8.3"
+    "underscore": "^1.13.8"
   },
   "comments": {
     "//": "do not upgrade the marked package version it is set by purpose",
diff --git a/core/src/test/resources/yarn/yarn-classic-audit/yarn.lock b/core/src/test/resources/yarn/yarn-classic-audit/yarn.lock
index d615a3002b2..206209677c2 100644
--- a/core/src/test/resources/yarn/yarn-classic-audit/yarn.lock
+++ b/core/src/test/resources/yarn/yarn-classic-audit/yarn.lock
@@ -6319,10 +6319,10 @@ underscore.string@>=2.3.3, underscore.string@~3.3.5:
   resolved "https://registry.yarnpkg.com/underscore/-/underscore-1.8.3.tgz#4f3fb53b106e6097fcf9cb4109f2a5e9bdfa5022"
   integrity sha1-Tz+1OxBuYJf8+ctBCfKl6b36UCI=
 
-underscore@^1.8.3:
-  version "1.12.0"
-  resolved "https://registry.yarnpkg.com/underscore/-/underscore-1.12.0.tgz#4814940551fc80587cef7840d1ebb0f16453be97"
-  integrity sha512-21rQzss/XPMjolTiIezSu3JAjgagXKROtNrYFEOWK109qY1Uv2tVjPTZ1ci2HgvQDA16gHYSthQIJfB+XId/rQ==
+underscore@^1.13.8:
+  version "1.13.8"
+  resolved "https://registry.yarnpkg.com/underscore/-/underscore-1.13.8.tgz#a93a21186c049dbf0e847496dba72b7bd8c1e92b"
+  integrity sha512-DXtD3ZtEQzc7M8m4cXotyHR+FAS18C64asBYY5vqZexfYryNNnDc02W4hKg3rdQuqOYas1jkseX0+nZXjTXnvQ==
 
 unicode-length@^1.0.0:
   version "1.0.3"