diff --git a/.changeset/security-fix-css-injection.md b/.changeset/security-fix-css-injection.md
new file mode 100644
index 0000000000..398ddb15a5
--- /dev/null
+++ b/.changeset/security-fix-css-injection.md
@@ -0,0 +1,5 @@
+---
+"svelte": patch
+---
+
+fix: prevent CSS injection in style directives