diff --git a/package.json b/package.json
index a4ecd93..517e4c6 100644
--- a/package.json
+++ b/package.json
@@ -65,7 +65,7 @@
     "ts-jest": "^26.5.4",
     "ts-node": "^10.2.1",
     "typescript": "^4.2.3",
-    "vite": "^2.6.0",
+    "vite": "^2.6.14",
     "yorkie": "^2.0.0",
     "glob": "^7.2.0",
     "shelljs": "^0.8.4"
diff --git a/packages/cli/package.json b/packages/cli/package.json
index 488b883..3e8bf0c 100644
--- a/packages/cli/package.json
+++ b/packages/cli/package.json
@@ -52,7 +52,7 @@
     "playwright-chromium": "^1.13.0",
     "sirv": "^1.0.14",
     "typescript": "^4.2.3",
-    "vite": "^2.6.0"
+    "vite": "^2.6.14"
   },
   "files": [
     "dist",
diff --git a/packages/cli/src/commands/create/app/app.ts b/packages/cli/src/commands/create/app/app.ts
index 2929fb8..c93eee4 100644
--- a/packages/cli/src/commands/create/app/app.ts
+++ b/packages/cli/src/commands/create/app/app.ts
@@ -99,7 +99,7 @@ export async function app(env: Env<{name: string}>) {
   workspace.install('react-dom', {version: '18.0.0-alpha-e6be2d531'});
   workspace.install('react-router-dom', {version: '^5.2.0'});
   workspace.install('@shopify/hydrogen');
-  workspace.install('vite', {dev: true, version: '^2.6.0'});
+  workspace.install('vite', {dev: true, version: '^2.6.14'});
   workspace.install('@vitejs/plugin-react-refresh', {
     dev: true,
     version: '^1.3.2',
diff --git a/packages/dev/package.json b/packages/dev/package.json
index 5302657..280b28f 100644
--- a/packages/dev/package.json
+++ b/packages/dev/package.json
@@ -28,7 +28,7 @@
     "prettier": "^2.3.2",
     "stylelint": "^13.13.0",
     "tailwindcss": "^2.2.4",
-    "vite": "^2.6.0"
+    "vite": "^2.6.14"
   },
   "dependencies": {
     "@headlessui/react": "^1.4.1",
diff --git a/packages/hydrogen/package.json b/packages/hydrogen/package.json
index 0351c51..f44f1df 100644
--- a/packages/hydrogen/package.json
+++ b/packages/hydrogen/package.json
@@ -78,10 +78,10 @@
     "react": "^18",
     "react-dom": "^18",
     "react-router-dom": "^5.2.0",
-    "vite": "^2.6.0"
+    "vite": "^2.6.14"
   },
   "dependencies": {
-    "@vitejs/plugin-react": "^1.0.6",
+    "@vitejs/plugin-react": "^1.0.8",
     "connect": "^3.7.0",
     "es-module-lexer": "^0.9.0",
     "fast-glob": "^3.2.5",
diff --git a/packages/playground/server-components-worker/package.json b/packages/playground/server-components-worker/package.json
index 095b02b..ed3752b 100644
--- a/packages/playground/server-components-worker/package.json
+++ b/packages/playground/server-components-worker/package.json
@@ -9,7 +9,7 @@
     "build:worker": "WORKER=true vite build --outDir dist/worker --ssr worker.js"
   },
   "devDependencies": {
-    "vite": "^2.6.0"
+    "vite": "^2.6.14"
   },
   "dependencies": {
     "@cloudflare/kv-asset-handler": "*",
diff --git a/packages/playground/server-components/package.json b/packages/playground/server-components/package.json
index a9ecba6..07c3838 100644
--- a/packages/playground/server-components/package.json
+++ b/packages/playground/server-components/package.json
@@ -9,7 +9,7 @@
     "build:server": "vite build --outDir dist/server --ssr src/entry-server.jsx"
   },
   "devDependencies": {
-    "vite": "^2.6.0"
+    "vite": "^2.6.14"
   },
   "dependencies": {
     "@shopify/hydrogen": "^0.6.1",
diff --git a/yarn.lock b/yarn.lock
index 79bbef9..e93d6c8 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -3330,10 +3330,10 @@
     "@typescript-eslint/types" "4.33.0"
     eslint-visitor-keys "^2.0.0"
 
-"@vitejs/plugin-react@^1.0.6":
-  version "1.0.7"
-  resolved "https://registry.yarnpkg.com/@vitejs/plugin-react/-/plugin-react-1.0.7.tgz#d542003afbae875f86fb89f3811a0f7c0c9479f5"
-  integrity sha512-dzxzohFOAVVXpGlFn6Uvw2xaSLp80Vjmg2e5G1XdMV266vVKrcDqg9CWP/AiJiXuubNUdgy1k4E8dNXI6WCyhw==
+"@vitejs/plugin-react@^1.0.8":
+  version "1.0.8"
+  resolved "https://registry.yarnpkg.com/@vitejs/plugin-react/-/plugin-react-1.0.8.tgz#98163d107fbc02b2c22c299657d4911490bb8820"
+  integrity sha512-Rt0tClew2QQokF03MoiIXTMMTIVKTH0eYulN9i81v/LitH4MfDHzIgetPzKvp+uCO9Fyb3tfYNKCw6l2/zW00w==
   dependencies:
     "@babel/core" "^7.15.5"
     "@babel/plugin-transform-react-jsx" "^7.14.9"
@@ -14516,10 +14516,10 @@ vite-plugin-inspect@^0.3.6:
     sirv "^1.0.17"
     ufo "^0.7.9"
 
-vite@^2.6.0:
-  version "2.6.1"
-  resolved "https://registry.yarnpkg.com/vite/-/vite-2.6.1.tgz#2e17908fa865d962d5fe33631df09c99e7ec486e"
-  integrity sha512-rYd+iGMQ+AytWfYBDhIz2upeiseuqrAMwmApJDR40wu12C9MqzemX449nM3FN1Z/FFSV+fMTFz7eMenngVSogA==
+vite@^2.6.14:
+  version "2.6.14"
+  resolved "https://registry.yarnpkg.com/vite/-/vite-2.6.14.tgz#35c09a15e4df823410819a2a239ab11efb186271"
+  integrity sha512-2HA9xGyi+EhY2MXo0+A2dRsqsAG3eFNEVIo12olkWhOmc8LfiM+eMdrXf+Ruje9gdXgvSqjLI9freec1RUM5EA==
   dependencies:
     esbuild "^0.13.2"
     postcss "^8.3.8"