diff --git a/.changeset/thin-ways-burn.md b/.changeset/thin-ways-burn.md
new file mode 100644
index 000000000..a777f580b
--- /dev/null
+++ b/.changeset/thin-ways-burn.md
@@ -0,0 +1,5 @@
+---
+'sv': patch
+---
+
+security: upgrade vite to avoid CVE-2025-31486
diff --git a/packages/create/templates/demo/package.template.json b/packages/create/templates/demo/package.template.json
index 7a06997ef..dd6512036 100644
--- a/packages/create/templates/demo/package.template.json
+++ b/packages/create/templates/demo/package.template.json
@@ -16,6 +16,6 @@
 		"@sveltejs/kit": "^2.16.0",
 		"@sveltejs/vite-plugin-svelte": "^5.0.0",
 		"svelte": "^5.25.0",
-		"vite": "^6.2.4"
+		"vite": "^6.2.5"
 	}
 }
diff --git a/packages/create/templates/library/package.template.json b/packages/create/templates/library/package.template.json
index 61fbdfffe..b0c824e38 100644
--- a/packages/create/templates/library/package.template.json
+++ b/packages/create/templates/library/package.template.json
@@ -30,7 +30,7 @@
 		"publint": "^0.3.2",
 		"svelte": "^5.0.0",
 		"typescript": "^5.3.2",
-		"vite": "^6.2.4"
+		"vite": "^6.2.5"
 	},
 	"keywords": ["svelte"]
 }
diff --git a/packages/create/templates/minimal/package.template.json b/packages/create/templates/minimal/package.template.json
index b23b6cf90..8d15b23d3 100644
--- a/packages/create/templates/minimal/package.template.json
+++ b/packages/create/templates/minimal/package.template.json
@@ -14,6 +14,6 @@
 		"@sveltejs/kit": "^2.16.0",
 		"@sveltejs/vite-plugin-svelte": "^5.0.0",
 		"svelte": "^5.0.0",
-		"vite": "^6.2.4"
+		"vite": "^6.2.5"
 	}
 }