thingsboard

Frameworks & Libraries

Open-source IoT Platform - Device management, data collection, processing and visualization.

Latest v4.3.1.3 · by thingsboardWebsitethingsboard/thingsboard

Branches

4.3
v4.3.1.3
4.2
v4.2.2.3

Release activity

Release activity — 10 releases across 5 days since Feb 3, 2026. Each cell is one day; darker means more releases that day. Nothing is recorded before Feb 3, 2026. Older weeks are hidden at this screen width.
JunJulAug
SundayNo releases on May 10, 2026No releases on May 17, 2026No releases on May 24, 2026No releases on May 31, 2026No releases on Jun 7, 2026No releases on Jun 14, 2026No releases on Jun 21, 2026No releases on Jun 28, 2026No releases on Jul 5, 2026No releases on Jul 12, 2026No releases on Jul 19, 2026No releases on Jul 26, 2026No releases on Aug 2, 2026No releases on Aug 9, 2026No releases on Aug 16, 2026No releases on Aug 23, 2026
MondayNo releases on May 11, 2026No releases on May 18, 2026No releases on May 25, 2026No releases on Jun 1, 2026No releases on Jun 8, 2026No releases on Jun 15, 2026No releases on Jun 22, 2026No releases on Jun 29, 2026No releases on Jul 6, 2026No releases on Jul 13, 2026No releases on Jul 20, 2026No releases on Jul 27, 2026No releases on Aug 3, 2026No releases on Aug 10, 2026No releases on Aug 17, 2026No releases on Aug 24, 2026
TuesdayNo releases on May 12, 2026No releases on May 19, 2026No releases on May 26, 2026No releases on Jun 2, 2026No releases on Jun 9, 2026No releases on Jun 16, 2026No releases on Jun 23, 20262 releases on Jun 30, 2026No releases on Jul 7, 2026No releases on Jul 14, 2026No releases on Jul 21, 2026No releases on Jul 28, 2026No releases on Aug 4, 2026No releases on Aug 11, 2026No releases on Aug 18, 2026
WednesdayNo releases on May 13, 2026No releases on May 20, 2026No releases on May 27, 2026No releases on Jun 3, 2026No releases on Jun 10, 2026No releases on Jun 17, 2026No releases on Jun 24, 2026No releases on Jul 1, 2026No releases on Jul 8, 2026No releases on Jul 15, 2026No releases on Jul 22, 2026No releases on Jul 29, 2026No releases on Aug 5, 2026No releases on Aug 12, 2026No releases on Aug 19, 2026
ThursdayNo releases on May 14, 2026No releases on May 21, 20262 releases on May 28, 2026No releases on Jun 4, 2026No releases on Jun 11, 2026No releases on Jun 18, 2026No releases on Jun 25, 2026No releases on Jul 2, 2026No releases on Jul 9, 2026No releases on Jul 16, 2026No releases on Jul 23, 2026No releases on Jul 30, 2026No releases on Aug 6, 2026No releases on Aug 13, 2026No releases on Aug 20, 2026
FridayNo releases on May 15, 2026No releases on May 22, 2026No releases on May 29, 2026No releases on Jun 5, 2026No releases on Jun 12, 2026No releases on Jun 19, 2026No releases on Jun 26, 2026No releases on Jul 3, 2026No releases on Jul 10, 2026No releases on Jul 17, 2026No releases on Jul 24, 2026No releases on Jul 31, 2026No releases on Aug 7, 2026No releases on Aug 14, 2026No releases on Aug 21, 2026
SaturdayNo releases on May 16, 2026No releases on May 23, 2026No releases on May 30, 2026No releases on Jun 6, 2026No releases on Jun 13, 2026No releases on Jun 20, 2026No releases on Jun 27, 2026No releases on Jul 4, 2026No releases on Jul 11, 2026No releases on Jul 18, 2026No releases on Jul 25, 2026No releases on Aug 1, 2026No releases on Aug 8, 2026No releases on Aug 15, 2026No releases on Aug 22, 2026

10 releases since Feb 3, 2026, busiest day 2

Changelog

Filter releases by branch
10 of 10 releases
v4.3.1.3Latest

ThingsBoard 4.3.1.3 Release

Added 3
  • Integration with IoT Hub
  • Added help pages for html container
  • Added handler for WebGL unavailability in map widget
Changed 2
  • AI models: structured output support for more providers and fix Vertex AI location routing
  • Hardened device credentials validation
Fixed 13
  • Prevented integer overflow in calculated field SUM output
  • Fixed queue prefix not applied in some cases causing orphaned topics
  • Fixed RPC call request rule node returning null body
  • Fixed permission check on alarm comment edit
  • Fixed transport tenant-profile lock convoy under cold-cache reconnect storm
  • Fixed Switch Control widget hanging on one-way persistent RPC
Security 4
  • Fixed CVE-2026-44705 and CVE-2026-46625
  • Fixed CVE-2026-45799
  • Fixed CVE-2026-44249, CVE-2026-44250, CVE-2026-44890, CVE-2026-44893, CVE-2026-45292, CVE-2026-45416, CVE-2026-45674, CVE-2026-46340, CVE-2026-47691, CVE-2026-48006, CVE-2026-48059, CVE-2026-50010, CVE-2026-50011
  • Fixed CVE-2026-44705, CVE-2026-50171, CVE-2026-50170, CVE-2026-54267, CVE-2026-54266, CVE-2026-54290, CVE-2026-48779, CVE-2026-54268, CWE-426, CWE-494, CVE-2026-53571, CVE-2026-12143, CVE-2026-9277

From thingsboard

What's Changed
Security
Core & Rule Engine
UI
Edge

Full Changelog: https://github.com/thingsboard/thingsboard/compare/v4.3.1.2...v4.3.1.3

View originalPermalink
How v4.3.1.3 went
v4.2.2.3

ThingsBoard 4.2.2.3 Release

Added 3
  • Integration with IoT Hub
  • Added help pages for html container
  • Added handler for WebGL unavailability in map widget
Changed 2
  • AI models: structured output support for more providers and fix Vertex AI location routing
  • Hardened device credentials validation
Fixed 11
  • Prevented integer overflow in calculated field SUM output
  • Fixed queue prefix not applied in some cases causing orphaned topics
  • Fixed RPC call request rule node returning null body
  • Fixed permission check on alarm comment edit
  • Fixed transport tenant-profile lock convoy under cold-cache reconnect storm
  • Fixed Switch Control widget hanging on one-way persistent RPC
Security 4
  • Fixed CVE-2026-44705 and CVE-2026-46625
  • Fixed CVE-2026-45799
  • Fixed CVE-2026-44249, CVE-2026-44250, CVE-2026-44890, CVE-2026-44893, CVE-2026-45292, CVE-2026-45416, CVE-2026-45674, CVE-2026-46340, CVE-2026-47691, CVE-2026-48006, CVE-2026-48059, CVE-2026-50010, CVE-2026-50011
  • Fixed CVE-2026-44705, CVE-2026-50171, CVE-2026-50170, CVE-2026-54267, CVE-2026-54266, CVE-2026-54290, CVE-2026-48779, CVE-2026-54268, CWE-426, CWE-494, CVE-2026-53571, CVE-2026-12143, CVE-2026-9277

From thingsboard

What's Changed
Security
Core & Rule Engine
UI
Edge

Full Changelog: https://github.com/thingsboard/thingsboard/compare/v4.2.2.2...v4.2.2.3

View originalPermalink
How v4.2.2.3 went
v4.3.1.2

ThingsBoard 4.3.1.2 Release

Added 4
  • Audit logging for tenant profile operations
  • Added entity keys V2 endpoint with sample values
  • Exposed HTTP response compression configuration params
  • LZ4 compression support for Kafka
Changed 2
  • Performance and reliability improvements for Efento message processing
  • Refactored APIs to meet OpenAPI standard
Fixed 1
  • Fixed WS sessions limit handling for public users
Security 13
  • Fixed CWE-770 in Jackson Core
  • Fixed CVE-2026-34487, CVE-2026-34486, CVE-2026-34483
  • Fixed CVE-2025-70340: system alarm comments access control
  • Fixed CVE-2026-39364, CVE-2026-39363, CVE-2026-4800
  • Fixed CVE-2026-40895
  • Fixed CVE-2026-5588, CVE-2026-5598, CVE-2025-14813, CVE-2026-35554, CVE-2026-27314

From thingsboard

What's Changed
Security
Core & Rule Engine
UI
Transport
Edge

Full Changelog: https://github.com/thingsboard/thingsboard/compare/v4.3.1.1...v4.3.1.2

View originalPermalink
How v4.3.1.2 went
v4.2.2.2

ThingsBoard 4.2.2.2 Release

Added 2
  • Expose HTTP response compression configuration parameters
  • LZ4 compression support for Kafka
Changed 1
  • Performance and reliability improvements for Efento message processing
Fixed 4
  • Fixed WS sessions limit handling for public users
  • Fixed REST API Call node blocking actor thread and semaphore permit leak
  • Fixed entity filtering by boolean data key for EDQS
  • Fixed MAX aggregation for mixed double and long telemetry values
Security 13
  • Fixed CWE-770 in Jackson Core
  • Fixed CVE-2026-34487, CVE-2026-34486, CVE-2026-34483
  • Fixed CVE-2025-70340: system alarm comments access control
  • Fixed multiple CVEs: 2026-39364, 2026-39363, 2026-4800
  • Fixed CVE-2026-40895
  • Fixed CVE-2026-5588, CVE-2026-5598, CVE-2025-14813, CVE-2026-35554, CVE-2026-27314

From thingsboard

What's Changed
Security
Core & Rule Engine
UI
Transport

Full Changelog: https://github.com/thingsboard/thingsboard/compare/v4.2.2.1...v4.2.2.2

View originalPermalink
How v4.2.2.2 went
v4.3.1.1

ThingsBoard 4.3.1.1 Release

Added 2
  • Added OTA package data cleanup
  • Added WS update on telemetry deletion
Changed 3
  • Sanitize database error messages
  • Updated locales da_DK, de_DE, el_GR, es_ES, fr_FR, it_IT, ja_JP, nl_NL, no_NO, pt_BR, tr_TR, uk_UA, zh_CN
  • Hide "Show on widgets" button on sysadmin level
Fixed 4
  • Fixed notification requests and RPC cleanup timeout on large datasets
  • Fixed WS reconnect loop and notification spam when session limit is reached
  • Fixed missing translation for Polylines toggle in map settings
  • Fixed resetting of validation on storeLink property
Security 10
  • Fixed XSS vulnerability in notification center
  • Fixed CVE-2026-24308, CVE-2026-24281 and CVE-2026-24400
  • Added configurable security headers and env-var-backed CORS configuration
  • Fixed SSRF DNS rebinding bypass and added allow-list
  • Fixed CVE-2026-24281, CVE-2026-24308, CVE-2026-24400, CVE-2026-29063, CVE-2026-29087, CVE-2026-29786, CVE-2026-30827, CVE-2026-31802, CVE-2026-32141, CVE-2026-32635, CVE-2026-27904
  • Fixed CVE-2026-22731, CVE-2026-22732, CVE-2026-22733, CVE-2026-22737 and upgraded to Spring Boot 3.5

From thingsboard

What's Changed
Security
Core & Rule Engine
UI
Edge
Transport

Full Changelog: https://github.com/thingsboard/thingsboard/compare/v4.3.1...v4.3.1.1

View originalPermalink
How v4.3.1.1 went
v4.2.2.1

ThingsBoard 4.2.2.1 Release

Added 3
  • Added OTA package data cleanup
  • Added WS update on telemetry deletion
  • Support combined PEM cert+key for Edge gRPC SSL
Changed 3
  • Sanitize database error messages
  • Updated locales da_DK, de_DE, el_GR, es_ES, fr_FR, it_IT, ja_JP, nl_NL, no_NO, pt_BR, tr_TR, uk_UA, zh_CN
  • Hidden Show on widgets button on sysadmin level
Fixed 6
  • Fixed notification requests and RPC cleanup timeout on large datasets
  • Fixed WS reconnect loop and notification spam when session limit is reached
  • Fixed resetting of validation on storeLink property
  • Fixed proxy error handling for 502/503/504 HTTP status codes
  • Fixed string-items-list autocomplete selection and blur handling
  • Fixed LwM2M Redis stores startup by using separate connections for SCAN and GET
Security 9
  • Fixed XSS vulnerability in notification center
  • Fixed CVE-2026-24308, CVE-2026-24281 and CVE-2026-24400
  • Added configurable security headers and env-var-backed CORS configuration
  • Fixed SSRF DNS rebinding bypass and added allow-list
  • Fixed CVE-2026-24281, CVE-2026-24308, CVE-2026-24400, CVE-2026-29063, CVE-2026-29087, CVE-2026-29786, CVE-2026-30827, CVE-2026-31802, CVE-2026-32141, CVE-2026-32635, CVE-2026-27904
  • Fixed CVE-2026-22731, CVE-2026-22732, CVE-2026-22733, CVE-2026-22737 and upgraded Spring Boot to 3.5

From thingsboard

What's Changed
Security
Core & Rule Engine
UI
Edge
Transport

Full Changelog: https://github.com/thingsboard/thingsboard/compare/v4.2.2...v4.2.2.1

View originalPermalink
How v4.2.2.1 went
v4.3.1

ThingsBoard 4.3.1 Release

Added 1
  • Added Cassandra result set byte-size limit
Changed 3
  • Migrated UI to Angular 20
  • Improved Apple OAuth2 mapper and refactored OAuth2 client validation
  • Made max WS message size configurable
Fixed 9
  • Fixed getTimeseries API (/{entityType}/{entityId}/values/timeseries)
  • Fixed TBEL script execution failures on repeated runs
  • Fixed blocking JPA queries on access-validator single thread
  • Fixed preservation of rule node execution counter in delay and deduplication nodes
  • Fixed infinite loop when rule chain input node forwards to its own rule chain
  • Fixed Redirect Url encoding
Security 7
  • Fixed CVE-2026-24734 and CVE-2025-66614
  • Fixed CVE-2025-7783, CVE-2026-26996 and CVE-2026-26960
  • Fixed CVE-2026-27903 and CVE-2026-27904
  • Added SSRF protection (must be enabled with SSRF_PROTECTION_ENABLED env)
  • Fixed CWE-770 in Jackson Core (GHSA-72hv-8253-57qq)
  • Fixed CVE-2026-27970 and CVE-2026-2391
  • Fixed CVE-2026-2781, CVE-2026-25646, CVE-2026-21945 and CVE-2026-21932 for Docker images

From thingsboard

What's Changed
Security
Major UI
Core & Rule Engine
UI
Transport
Edge

Full Changelog: https://github.com/thingsboard/thingsboard/compare/v4.3.0.1...v4.3.1

View originalPermalink
How v4.3.1 went
v4.2.2

ThingsBoard 4.2.2 Release

Added 3
  • Add Cassandra result set byte-size limit
  • Make max WS message size configurable
  • Extend modules map with moment-timezone, canvas-gauges and ngx-hm-carousel
Changed 2
  • Migrate UI to Angular 20
  • Improve Apple OAuth2 mapper and refactor OAuth2 client validation
Fixed 8
  • Fix TBEL script execution failures on repeated runs
  • Fix blocking JPA queries on access-validator single thread
  • Fix preservation of rule node execution counter in delay and deduplication nodes
  • Fix infinite loop when rule chain input node forwards to its own rule chain
  • Fix Redirect Url encoding
  • Fix Popover placement for Marker, Polygon and Circle overlay config
  • Fix adaptive in mail server configuration
  • Fix race condition causing the toast component
Security 7
  • Fixed CVE-2026-24734 and CVE-2025-66614
  • Fixed CVE-2025-7783, CVE-2026-26996 and CVE-2026-26960
  • Fixed CVE-2026-27903 and CVE-2026-27904
  • Add SSRF protection (must be enabled with SSRF_PROTECTION_ENABLED env)
  • Fixed CWE-770 in Jackson Core (GHSA-72hv-8253-57qq)
  • Fixed CVE-2026-27970 and CVE-2026-2391
  • Fixed CVE-2026-2781 and CVE-2026-25646 for Docker images

From thingsboard

What's Changed
Security
Major UI
Core & Rule Engine
UI
Transport
Edge

Full Changelog: https://github.com/thingsboard/thingsboard/compare/v4.2.1.2...v4.2.2

View originalPermalink
How v4.2.2 went
v4.3.0.1

ThingsBoard 4.3.0.1 Release

Changed 2
  • Updated locales el_GR, es_ES, hi_IN, nl_NL, no_NO
  • Removed required from "Current Customer" field in entity alias
Fixed 10
  • Fixed propagation path updates handling for propagation CF
  • Fixed unnecessary database updates for disabled users during failed login
  • Fixed form settings in Send RPC and Segmented Button widgets
  • Fixed help link for API key
  • Fixed missing '%' character in alias help text
  • Fixed default settings in API Usage widget
Security 2
  • Fixed CVE-2025-69420 and CVE-2025-69419 for Docker images
  • Fixed CVE-2026-22610

From thingsboard

What's Changed
Security
Core & Rule Engine
UI

Full Changelog: https://github.com/thingsboard/thingsboard/compare/v4.3...v4.3.0.1

View originalPermalink
How v4.3.0.1 went
v4.2.1.2

ThingsBoard 4.2.1.2 Release

Added 1
  • Added Redis ACL (username) authentication support
Fixed 14
  • Fixed invalid finish ts for jobs with zero tasks in task manager
  • Fixed entity data query for sysadmin
  • Fixed partition cleanup for non-public PostgreSQL schemas
  • Fixed SMS usage state when disabled in tenant profile
  • Fixed unnecessary database updates for disabled users during failed login
  • Fixed NPE for LwM2M client context after reboot
Security 3
  • Fixed CVE-2025-68973, CVE-2025-6020, CVE-2025-13601, CVE-2025-69420, CVE-2026-21945, CVE-2025-69419 and CVE-2026-21932 for Docker images
  • Fixed CVE-2026-22610
  • Fixed CVE-2025-15284

From thingsboard

What's Changed
Security
Core & Rule Engine
Transport
UI

Full Changelog: https://github.com/thingsboard/thingsboard/compare/v4.2.1.1...v4.2.1.2

View originalPermalink
How v4.2.1.2 went

More in Frameworks & Libraries

View all
React

The library for web and native user interfaces.

Meta
vue

This is the repo for Vue 2. For Vue 3, go to https://github.com/vuejs/core

vuejs
Vue

The progressive JavaScript framework for building user interfaces.

Vue.js
bootstrap

The most popular HTML, CSS, and JavaScript framework for developing responsive, mobile first projects on the web.

twbs
react-native

react-native release notes.

Meta
D3

Bring data to life with SVG, Canvas and HTML.

Observable

Discussion

If you publish thingsboard, you can claim this product by proving you administer its repository.