diff --git a/yarn.lock b/yarn.lock
index 9f973707..e4c10652 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -9321,9 +9321,9 @@ loopback-phase@^3.0.0, loopback-phase@^3.1.0:
     strong-globalize "^4.1.1"
 
 loopback@^3.24.0:
-  version "3.24.0"
-  resolved "https://registry.yarnpkg.com/loopback/-/loopback-3.24.0.tgz#a90e7535af9982daac098ecac3c50e880aecf625"
-  integrity sha512-eb5ls+OpEL+hKAllqlAf4pRkrG+yjCjFeYC6+qpqbmtTPGSRfgNi3+n1WPXIPd7JHgD7L4y6HXKv+2sZTy2qDQ==
+  version "3.25.1"
+  resolved "https://registry.yarnpkg.com/loopback/-/loopback-3.25.1.tgz#651af40e6626a49216885364d4812b1f3cab9020"
+  integrity sha512-JIl3e9FI7uU5p47rpV+Bv5JQTVaIhzUngp7GqGz4aKJ1Qwgmp3xfFTGkMdhgG2I8pbXIhoR2kPUkFF/yD/6WcA==
   dependencies:
     async "^2.0.1"
     bcryptjs "^2.1.0"
@@ -9348,7 +9348,7 @@ loopback@^3.24.0:
     strong-globalize "^4.1.1"
     strong-remoting "^3.11.0"
     uid2 "0.0.3"
-    underscore.string "^3.0.3"
+    underscore.string "^3.3.5"
 
 loose-envify@^1.1.0, loose-envify@^1.3.1:
   version "1.4.0"
@@ -14667,7 +14667,7 @@ underscore-plus@1.x, underscore-plus@^1, underscore-plus@^1.5.1:
   dependencies:
     underscore "^1.9.1"
 
-underscore.string@^3.0.3:
+underscore.string@^3.3.5:
   version "3.3.5"
   resolved "https://registry.yarnpkg.com/underscore.string/-/underscore.string-3.3.5.tgz#fc2ad255b8bd309e239cbc5816fd23a9b7ea4023"
   integrity sha512-g+dpmgn+XBneLmXXo+sGlW5xQEt4ErkS3mgeN2GFbremYeMBSJKr9Wf2KJplQVaiPY/f7FN6atosWYNm9ovrYg==