Skip to content
Every CVE
Browse
Docs
Sources
Guide
Search
/
Get
API key
Every CVE
Vendors
Doist
Doist vulnerabilities
Products
Todoist
2
Newest
doist
todoist
Todoist v8896 is vulnerable to Cross Site Scripting (XSS) in /api/v1/uploads. Uploaded SVG files...
CVE-2025-63317
5.4
Medium
December 1, 2025
doist
todoist
Todoist v8484 contains a stored cross-site scripting (XSS) vulnerability in the avatar upload...
CVE-2025-57292
6.1
Medium
September 26, 2025
esc
Pages
All vulnerabilities
Browse
Docs
Sources
Guide
Get API key
Move
Enter
Open