# thingsboard v4.3.1.3 — ThingsBoard 4.3.1.3 Release - Product: thingsboard (https://whatsnew.fyi/product/thingsboard) - Vendor: thingsboard - Date: 2026-06-30 - Version: v4.3.1.3 - Original notes: https://github.com/thingsboard/thingsboard/releases/tag/v4.3.1.3 - Permalink: https://whatsnew.fyi/product/thingsboard/releases/v4.3.1.3 What's New is an index, not a publisher: every entry below links to the vendor's own release notes, which are the authoritative source. Entries are labelled where they are hand-curated sample data, pre-releases, or drawn from a secondary source such as a developer blog. Reuse: the summaries, labels and curation here are © What's New. Quote freely with attribution and a link back; wholesale republication of the corpus is not permitted — terms: https://whatsnew.fyi/terms. The vendors' own release notes remain their publishers'. --- - **security** — Fixed CVE-2026-44705 and CVE-2026-46625 - **security** — Fixed CVE-2026-45799 - **security** — Fixed CVE-2026-44249, CVE-2026-44250, CVE-2026-44890, CVE-2026-44893, CVE-2026-45292, CVE-2026-45416, CVE-2026-45674, CVE-2026-46340, CVE-2026-47691, CVE-2026-48006, CVE-2026-48059, CVE-2026-50010, CVE-2026-50011 - **security** — Fixed CVE-2026-44705, CVE-2026-50171, CVE-2026-50170, CVE-2026-54267, CVE-2026-54266, CVE-2026-54290, CVE-2026-48779, CVE-2026-54268, CWE-426, CWE-494, CVE-2026-53571, CVE-2026-12143, CVE-2026-9277 - **added** — Integration with IoT Hub - **changed** — AI models: structured output support for more providers and fix Vertex AI location routing - **fixed** — Prevented integer overflow in calculated field SUM output - **fixed** — Fixed queue prefix not applied in some cases causing orphaned topics - **fixed** — Fixed RPC call request rule node returning null body - **fixed** — Fixed permission check on alarm comment edit - **changed** — Hardened device credentials validation - **fixed** — Fixed transport tenant-profile lock convoy under cold-cache reconnect storm - **added** — Added help pages for html container - **fixed** — Fixed Switch Control widget hanging on one-way persistent RPC - **fixed** — Fixed no widgets shown in mobile view after state transition from divided layout - **fixed** — Fixed change Password button stays disabled when form is filled programmatically - **fixed** — Fixed sync highlight overlay scroll on Safari in string-pattern-autocomplete - **fixed** — Fixed Advanced Widget Style Editor rendering - **fixed** — Fixed dashboard logo stretch at full width - **fixed** — Fixed "Confirm exit" dialog appearing when the form was not changed - **added** — Added handler for WebGL unavailability in map widget - **fixed** — Fixed edge event loss for kafka edges during sync ##### What's Changed ###### Security * Fixed CVE-2026-44705 and CVE-2026-46625 by @mtsymbarov-del in https://github.com/thingsboard/thingsboard/pull/15721 * Fixed CVE-2026-45799 by @ViacheslavKlimov in https://github.com/thingsboard/thingsboard/pull/15757 * Fixed CVE-2026-44249, CVE-2026-44250, CVE-2026-44890, CVE-2026-44893, CVE-2026-45292, CVE-2026-45416, CVE-2026-45674, CVE-2026-46340, CVE-2026-47691, CVE-2026-48006, CVE-2026-48059, CVE-2026-50010, CVE-2026-50011 by @ViacheslavKlimov in https://github.com/thingsboard/thingsboard/pull/15795 * Fixed CVE-2026-44705, CVE-2026-50171, CVE-2026-50170, CVE-2026-54267, CVE-2026-54266, CVE-2026-54290, CVE-2026-48779, CVE-2026-54268, CWE-426, CWE-494, CVE-2026-53571, CVE-2026-12143, CVE-2026-9277 by @mtsymbarov-del in https://github.com/thingsboard/thingsboard/pull/15799 ###### Core & Rule Engine * Integration with IoT Hub by @ikulikov in https://github.com/thingsboard/thingsboard/pull/15193 * AI models: structured output support for more providers; fix Vertex AI location routing by @dskarzh in https://github.com/thingsboard/thingsboard/pull/15728 * Prevented integer overflow in calculated field SUM output by @volodymyr-babak in https://github.com/thingsboard/thingsboard/pull/15620 * Fixed queue prefix not applied in some cases causing orphaned topics by @AndriiLandiak in https://github.com/thingsboard/thingsboard/pull/15666 * Fixed RPC call request rule node returning null body by @dashevchenko in https://github.com/thingsboard/thingsboard/pull/15662 * Fixed permission check on alarm comment edit by @dashevchenko in https://github.com/thingsboard/thingsboard/pull/15715 * Hardened device credentials validation by @dashevchenko in https://github.com/thingsboard/thingsboard/pull/15550 * Fixed transport tenant-profile lock convoy under cold-cache reconnect storm by @ViacheslavKlimov in https://github.com/thingsboard/thingsboard/pull/15744 ###### UI * Added help pages for html container by @pinkevmladchy in https://github.com/thingsboard/thingsboard/pull/15767 * Fixed Switch Control widget hanging on one-way persistent RPC by @mtsymbarov-del in https://github.com/thingsboard/thingsboard/pull/15711 * Fixed no widgets shown in mobile view after state transition from divided layout by @mtsymbarov-del in https://github.com/thingsboard/thingsboard/pull/15710 * Fixed change Password button stays disabled when form is filled programmatically by @mtsymbarov-del in https://github.com/thingsboard/thingsboard/pull/15701 * Fixed sync highlight overlay scroll on Safari in string-pattern-autocomplete by @mtsymbarov-del in https://github.com/thingsboard/thingsboard/pull/15754 * Fixed Advanced Widget Style Editor rendering by @mtsymbarov-del in https://github.com/thingsboard/thingsboard/pull/15803 * Fixed dashboard logo stretch at full width by @mtsymbarov-del in https://github.com/thingsboard/thingsboard/pull/15800 * Fixed "Confirm exit" dialog appearing when the form was not changed by @mtsymbarov-del in https://github.com/thingsboard/thingsboard/pull/15764 * Added handler for WebGL unavailability in map widget by @mtsymbarov-del in https://github.com/thingsboard/thingsboard/pull/15640 ###### Edge * Fixed edge event loss for kafka edges during sync by @AndriiLandiak in https://github.com/thingsboard/thingsboard/pull/15756 **Full Changelog**: https://github.com/thingsboard/thingsboard/compare/v4.3.1.2...v4.3.1.3