diff --git a/bonobo/contrib/jupyter/js/package.json b/bonobo/contrib/jupyter/js/package.json
index 02a2fbf1..4bb7b888 100644
--- a/bonobo/contrib/jupyter/js/package.json
+++ b/bonobo/contrib/jupyter/js/package.json
@@ -24,6 +24,6 @@
   },
   "dependencies": {
     "jupyter-js-widgets": "^2.0.9",
-    "underscore": "^1.8.3"
+    "underscore": "^1.12.1"
   }
 }
diff --git a/bonobo/contrib/jupyter/js/yarn.lock b/bonobo/contrib/jupyter/js/yarn.lock
index 77c958a0..c1468a3e 100644
--- a/bonobo/contrib/jupyter/js/yarn.lock
+++ b/bonobo/contrib/jupyter/js/yarn.lock
@@ -1329,9 +1329,9 @@ uid-number@^0.0.6:
   version "0.0.6"
   resolved "https://registry.yarnpkg.com/uid-number/-/uid-number-0.0.6.tgz#0ea10e8035e8eb5b8e4449f06da1c730663baa81"
 
-underscore@>=1.7.0, underscore@^1.8.3:
-  version "1.8.3"
-  resolved "https://registry.yarnpkg.com/underscore/-/underscore-1.8.3.tgz#4f3fb53b106e6097fcf9cb4109f2a5e9bdfa5022"
+underscore@>=1.7.0, underscore@^1.12.1, underscore@^1.8.3:
+  version "1.12.1"
+  resolved "https://registry.yarnpkg.com/underscore/-/underscore-1.12.1.tgz#7bb8cc9b3d397e201cf8553336d262544ead829e"
 
 url-join@^1.1.0:
   version "1.1.0"