Repository navigation
Security: Doist/todoist-mcp
Security
No security policy detected
This project has not set up a SECURITY.md file yet.
Report a vulnerability-
Browser DNS rebinding lets websites write and delete Todoist data through local MCP serverGHSA-833v-v58w-294h published
Jul 10, 2026 by henningmuCritical
Learn more about advisories related to Doist/todoist-mcp in the GitHub Advisory Database