diff --git a/packages/vite/package.json b/packages/vite/package.json
index 21d08110283ea4..61732d6be0327b 100644
--- a/packages/vite/package.json
+++ b/packages/vite/package.json
@@ -128,6 +128,7 @@
     "micromatch": "^4.0.7",
     "mlly": "^1.7.1",
     "mrmime": "^2.0.0",
+    "nanoid": "^5.0.7",
     "open": "^8.4.2",
     "parse5": "^7.1.2",
     "pathe": "^1.1.2",
diff --git a/packages/vite/src/module-runner/runnerTransport.ts b/packages/vite/src/module-runner/runnerTransport.ts
index f946d956342c25..4e45c45dea02d1 100644
--- a/packages/vite/src/module-runner/runnerTransport.ts
+++ b/packages/vite/src/module-runner/runnerTransport.ts
@@ -1,3 +1,4 @@
+import { nanoid } from 'nanoid/non-secure'
 import type { FetchFunction, FetchResult } from './types'
 
 export interface RunnerTransport {
@@ -70,14 +71,3 @@ export class RemoteRunnerTransport implements RunnerTransport {
     return this.resolve<FetchResult>('fetchModule', id, importer)
   }
 }
-
-// port from nanoid
-// https://github.com/ai/nanoid
-const urlAlphabet =
-  'useandom-26T198340PX75pxJACKVERYMINDBUSHWOLF_GQZbfghjklqvwyzrict'
-function nanoid(size = 21) {
-  let id = ''
-  let i = size
-  while (i--) id += urlAlphabet[(Math.random() * 64) | 0]
-  return id
-}
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index e1fcbc65d11dad..183b66c690dfe1 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -343,6 +343,9 @@ importers:
       mrmime:
         specifier: ^2.0.0
         version: 2.0.0
+      nanoid:
+        specifier: ^5.0.7
+        version: 5.0.7
       open:
         specifier: ^8.4.2
         version: 8.4.2
@@ -5455,6 +5458,11 @@ packages:
     engines: {node: ^10 || ^12 || ^13.7 || ^14 || >=15.0.1}
     hasBin: true
 
+  nanoid@5.0.7:
+    resolution: {integrity: sha512-oLxFY2gd2IqnjcYyOXD8XGCftpGtZP2AbHbOkthDkvRywH5ayNtPVy9YlOPcHckXzbLTCHpkb7FB+yuxKV13pQ==}
+    engines: {node: ^18 || >=20}
+    hasBin: true
+
   natural-compare@1.4.0:
     resolution: {integrity: sha512-OWND8ei3VtNC9h7V60qff3SVobHr996CTwgxubgyQYEpg290h9J0buyECNNJexkFm5sOajh5G116RYA1c8ZMSw==}
 
@@ -5726,6 +5734,9 @@ packages:
     engines: {node: '>=18.0.0'}
     peerDependencies:
       postcss: ^8.0.0
+    peerDependenciesMeta:
+      postcss:
+        optional: true
 
   postcss-js@4.0.1:
     resolution: {integrity: sha512-dDLF8pEO191hJMtlHFPRa8xsizHaM82MLfNkUHdUtVEV3tgTp5oj+8qbEqYM57SLfc74KSbw//4SeJma2LRVIw==}
@@ -11036,6 +11047,8 @@ snapshots:
 
   nanoid@3.3.7: {}
 
+  nanoid@5.0.7: {}
+
   natural-compare@1.4.0: {}
 
   needle@3.3.1:
@@ -11264,10 +11277,11 @@ snapshots:
 
   postcss-import@16.1.0(postcss@8.4.40):
     dependencies:
-      postcss: 8.4.40
       postcss-value-parser: 4.2.0
       read-cache: 1.0.0
       resolve: 1.22.8
+    optionalDependencies:
+      postcss: 8.4.40
 
   postcss-js@4.0.1(postcss@8.4.40):
     dependencies: