diff --git a/package-lock.json b/package-lock.json
index 00cf6b28ee..b926af63df 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -23395,9 +23395,9 @@
 			"dev": true
 		},
 		"underscore": {
-			"version": "1.13.2",
-			"resolved": "https://registry.npmjs.org/underscore/-/underscore-1.13.2.tgz",
-			"integrity": "sha512-ekY1NhRzq0B08g4bGuX4wd2jZx5GnKz6mKSqFL4nqBlfyMGiG10gDFhDTMEfYmDL6Jy0FUIZp7wiRB+0BP7J2g=="
+			"version": "1.13.3",
+			"resolved": "https://registry.npmjs.org/underscore/-/underscore-1.13.3.tgz",
+			"integrity": "sha512-QvjkYpiD+dJJraRA8+dGAU4i7aBbb2s0S3jA45TFOvg2VgqvdCDd/3N6CqA8gluk1W91GLoXg5enMUx560QzuA=="
 		},
 		"underscore.string": {
 			"version": "3.3.5",
diff --git a/package.json b/package.json
index 05e918892e..e6902ba4b2 100644
--- a/package.json
+++ b/package.json
@@ -150,7 +150,7 @@
 		"react-dom": "17.0.2",
 		"regenerator-runtime": "0.13.9",
 		"twemoji": "14.0.2",
-		"underscore": "1.13.2",
+		"underscore": "1.13.3",
 		"whatwg-fetch": "3.6.2"
 	},
 	"scripts": {
diff --git a/src/wp-includes/script-loader.php b/src/wp-includes/script-loader.php
index 264ff2c6e1..abe176cd83 100644
--- a/src/wp-includes/script-loader.php
+++ b/src/wp-includes/script-loader.php
@@ -968,7 +968,7 @@ function wp_default_scripts( $scripts ) {
 	$scripts->add( 'json2', "/wp-includes/js/json2$suffix.js", array(), '2015-05-03' );
 	did_action( 'init' ) && $scripts->add_data( 'json2', 'conditional', 'lt IE 8' );
 
-	$scripts->add( 'underscore', "/wp-includes/js/underscore$dev_suffix.js", array(), '1.13.2', 1 );
+	$scripts->add( 'underscore', "/wp-includes/js/underscore$dev_suffix.js", array(), '1.13.3', 1 );
 	$scripts->add( 'backbone', "/wp-includes/js/backbone$dev_suffix.js", array( 'underscore', 'jquery' ), '1.4.1', 1 );
 
 	$scripts->add( 'wp-util', "/wp-includes/js/wp-util$suffix.js", array( 'underscore', 'jquery' ), false, 1 );