Doist

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Doist records in CISA KEV

No Doist vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records in Todoist · all components

TI-2025-35498 CVE-2025-57292 · GHSA-3m8f-p4mj-cx3x

MEDIUM 60

Todoist v8484 contains a stored cross-site scripting (XSS) vulnerability in the avatar upload functionality.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00241 Published 2025-09-26 No fix listed CWE-79

TI-2025-39279 CVE-2025-63317 · GHSA-cmm8-cjqm-f8mf

MEDIUM 58

Todoist v8896 is vulnerable to Cross Site Scripting (XSS) in /api/v1/uploads.

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.00228 Published 2025-12-01 No fix listed CWE-79