diff --git a/package-lock.json b/package-lock.json
index 5442e2716c..0380c2380e 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -25449,9 +25449,9 @@
 			"dev": true
 		},
 		"underscore": {
-			"version": "1.13.3",
-			"resolved": "https://registry.npmjs.org/underscore/-/underscore-1.13.3.tgz",
-			"integrity": "sha512-QvjkYpiD+dJJraRA8+dGAU4i7aBbb2s0S3jA45TFOvg2VgqvdCDd/3N6CqA8gluk1W91GLoXg5enMUx560QzuA=="
+			"version": "1.13.4",
+			"resolved": "https://registry.npmjs.org/underscore/-/underscore-1.13.4.tgz",
+			"integrity": "sha512-BQFnUDuAQ4Yf/cYY5LNrK9NCJFKriaRbD9uR1fTeXnBeoa97W0i41qkZfGO9pSo8I5KzjAcSY2XYtdf0oKd7KQ=="
 		},
 		"underscore.string": {
 			"version": "3.3.5",
diff --git a/package.json b/package.json
index d3b20a2914..74f1b2c719 100644
--- a/package.json
+++ b/package.json
@@ -151,7 +151,7 @@
 		"react-dom": "17.0.2",
 		"regenerator-runtime": "0.13.9",
 		"twemoji": "14.0.2",
-		"underscore": "1.13.3",
+		"underscore": "1.13.4",
 		"whatwg-fetch": "3.6.2"
 	},
 	"scripts": {
diff --git a/src/wp-includes/script-loader.php b/src/wp-includes/script-loader.php
index 61e8a1d210..fd4ed814d7 100644
--- a/src/wp-includes/script-loader.php
+++ b/src/wp-includes/script-loader.php
@@ -968,7 +968,7 @@ function wp_default_scripts( $scripts ) {
 	$scripts->add( 'json2', "/wp-includes/js/json2$suffix.js", array(), '2015-05-03' );
 	did_action( 'init' ) && $scripts->add_data( 'json2', 'conditional', 'lt IE 8' );
 
-	$scripts->add( 'underscore', "/wp-includes/js/underscore$dev_suffix.js", array(), '1.13.3', 1 );
+	$scripts->add( 'underscore', "/wp-includes/js/underscore$dev_suffix.js", array(), '1.13.4', 1 );
 	$scripts->add( 'backbone', "/wp-includes/js/backbone$dev_suffix.js", array( 'underscore', 'jquery' ), '1.4.1', 1 );
 
 	$scripts->add( 'wp-util', "/wp-includes/js/wp-util$suffix.js", array( 'underscore', 'jquery' ), false, 1 );