diff --git a/packages/kit/package.json b/packages/kit/package.json
index aa9eadd201..4103157956 100644
--- a/packages/kit/package.json
+++ b/packages/kit/package.json
@@ -18,7 +18,7 @@
   "dependencies": {
     "consola": "^2.15.3",
     "create-require": "^1.1.1",
-    "defu": "^4.0.1",
+    "defu": "^5.0.0",
     "dotenv": "^9.0.2",
     "hash-sum": "^2.0.0",
     "jiti": "^1.9.2",
diff --git a/packages/nitro/package.json b/packages/nitro/package.json
index 860f003410..8579b4b6f8 100644
--- a/packages/nitro/package.json
+++ b/packages/nitro/package.json
@@ -34,7 +34,7 @@
     "connect": "^3.7.0",
     "consola": "^2.15.3",
     "debounce": "^1.2.1",
-    "defu": "^4.0.1",
+    "defu": "^5.0.0",
     "destr": "^1.1.0",
     "dot-prop": "^6.0.1",
     "esbuild": "^0.10.0",
diff --git a/packages/nuxt3/package.json b/packages/nuxt3/package.json
index a03100bd1c..1b53fccfd3 100644
--- a/packages/nuxt3/package.json
+++ b/packages/nuxt3/package.json
@@ -24,7 +24,7 @@
     "@nuxt/webpack-builder": "^0.3.4",
     "chokidar": "^3.5.1",
     "consola": "^2.15.3",
-    "defu": "^4.0.1",
+    "defu": "^5.0.0",
     "fs-extra": "^10.0.0",
     "globby": "^11.0.3",
     "hash-sum": "^2.0.0",
diff --git a/yarn.lock b/yarn.lock
index eedccccdd9..1d909db858 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -1772,7 +1772,7 @@ __metadata:
   dependencies:
     consola: ^2.15.3
     create-require: ^1.1.1
-    defu: ^4.0.1
+    defu: ^5.0.0
     dotenv: ^9.0.2
     hash-sum: ^2.0.0
     jiti: ^1.9.2
@@ -1817,7 +1817,7 @@ __metadata:
     connect: ^3.7.0
     consola: ^2.15.3
     debounce: ^1.2.1
-    defu: ^4.0.1
+    defu: ^5.0.0
     destr: ^1.1.0
     dot-prop: ^6.0.1
     esbuild: ^0.10.0
@@ -5501,6 +5501,13 @@ __metadata:
   languageName: node
   linkType: hard
 
+"defu@npm:^5.0.0":
+  version: 5.0.0
+  resolution: "defu@npm:5.0.0"
+  checksum: 6c795bc0ce06b0ff3ca1ff32a12155d9119eb764697aa62d9de4af262a026fe11cbd7e99309193a59ca3799d7e8d40c06ee60fc08a5f2348f4b125a884f06905
+  languageName: node
+  linkType: hard
+
 "delayed-stream@npm:~1.0.0":
   version: 1.0.0
   resolution: "delayed-stream@npm:1.0.0"
@@ -10816,7 +10823,7 @@ __metadata:
     "@types/lodash": ^4.14.169
     chokidar: ^3.5.1
     consola: ^2.15.3
-    defu: ^4.0.1
+    defu: ^5.0.0
     fs-extra: ^10.0.0
     globby: ^11.0.3
     hash-sum: ^2.0.0