Vulnerabilidades de Doist
CVEs publicadas que afetam produtos de Doist: 1 registro(s), com severidade, exploração e correções.
CVE-2025-63317
Média · 5.4
CWE-79 01/12/2025
Cross-site Scripting (XSS) em Doist Todoist
Todoist v8896 is vulnerable to Cross Site Scripting (XSS) in /api/v1/uploads. Uploaded SVG files have no sanitization applied, so embedded JavaScript executes when a user opens the attachment from a task/comment.