Doist Todoist vulnerabilities

• doist todoist Todoist v8896 is vulnerable to Cross Site Scripting (XSS) in /api/v1/uploads. Uploaded SVG files... CVE-2025-63317 5.4 MediumDecember 1, 2025
• doist todoist Todoist v8484 contains a stored cross-site scripting (XSS) vulnerability in the avatar upload... CVE-2025-57292 6.1 MediumSeptember 26, 2025