ThingsBoard v4.3.1 LTS release notes

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: 2 people

_config.yml

@@ -83,19 +83,19 @@ release:
   branch: release-4.3
   branch_major_next: master
   # In short form (e.g. 4.3)
-  ver: 4.3.0.1
+  ver: 4.3.1
   # In short form (e.g. 4.3)
-  ce_ver: 4.3.0.1
+  ce_ver: 4.3.1
   # In short form (e.g. v4.3)
-  ce_tag: v4.3.0.1
+  ce_tag: v4.3.1
   # In full form (e.g. 4.3.0, 4.3.0.1)
-  ce_full_ver: 4.3.0.1
+  ce_full_ver: 4.3.1
   # In short form (e.g. 4.3pe)
-  pe_ver: 4.3.0.1pe
+  pe_ver: 4.3.1pe
   # In full form (e.g. 4.3.0PE, 4.3.0.1PE)
-  pe_full_ver: 4.3.0.1PE
+  pe_full_ver: 4.3.1PE
   # In short form (e.g. v4.3)
-  wd_examples_commit: v4.3.0.1
+  wd_examples_commit: v4.3.1
   # >>> EDGE
   edge_ver: 4.3.0.1
   edge_tag: v4.3.0.1

_data/upgrade-instructions-data.yml

@@ -1,4 +1,11 @@
+4.3.1:
+  upgradable-from: "4.2.1.x"
+  release-date: Mar 10 2026
+  lts: "true"
+  patch: "true"
+  x: "true"
 4.3.0.1:
+  vulnerable: "true"
   upgradable-from: "4.2.1.x"
   release-date: Feb 3 2026
   release-date-edge: Feb 4, 2026
@@ -14,7 +21,7 @@
   x: "true"
 4.2.2:
   upgradable-from: "4.2.0"
-  release-date: Mar 09 2026
+  release-date: Mar 10 2026
   lts: "true"
   patch: "true"
   x: "true"

_includes/docs/pe/releases/releases-table/v4-2-2.md

@@ -1,6 +1,6 @@
-### ThingsBoard PE v4.2.2 (Mar 09, 2026)
+### ThingsBoard PE v4.2.2 (Mar 10, 2026)
 
-Everything from [CE v4.2.2](/docs/releases/releases-table/v4-2-x/#thingsboard-ce-v422-mar-09-2026){: target="_blank"} with the following fixes.
+Everything from [CE v4.2.2](/docs/releases/releases-table/v4-2-x/#thingsboard-ce-v422-mar-10-2026){: target="_blank"} with the following fixes.
 
 * Security
   * Fixed local files enumeration vulnerability

_includes/docs/pe/releases/releases-table/v4-3-1.md

@@ -0,0 +1,12 @@
+### ThingsBoard PE v4.3.1 (Mar 10, 2026)
+
+Everything from [CE v4.3.1](/docs/releases/releases-table/v4-3-x/#thingsboard-ce-v431-mar-10-2026){: target="_blank"} with the following fixes.
+
+* Security
+  * Fixed local files enumeration vulnerability
+
+* UI
+  * Updated max length validator on secret storage value
+
+* Edge
+  * Fixed construction of Edge in case add-on

_includes/docs/releases/releases-table/v4-2-2.md

@@ -1,4 +1,4 @@
-### ThingsBoard CE v4.2.2 (Mar 09, 2026)
+### ThingsBoard CE v4.2.2 (Mar 10, 2026)
 
 **What's Changed**
 

_includes/docs/releases/releases-table/v4-3-1.md

@@ -0,0 +1,48 @@
+### ThingsBoard CE v4.3.1 (Mar 10, 2026)
+
+**What's Changed**
+
+* Security
+  * [#15076](https://github.com/thingsboard/thingsboard/pull/15076) Fixed CVE-2026-24734 and CVE-2025-66614 by @ViacheslavKlimov
+  * [#15079](https://github.com/thingsboard/thingsboard/pull/15079) Fixed CVE-2025-7783, CVE-2026-26996 and CVE-2026-26960 by @vvlladd28
+  * [#15109](https://github.com/thingsboard/thingsboard/pull/15109) Fixed CVE-2026-27903 and CVE-2026-27904 by @vvlladd28
+  * [#15123](https://github.com/thingsboard/thingsboard/pull/15123) Added SSRF protection (must be enabled with SSRF_PROTECTION_ENABLED env) by @ViacheslavKlimov
+  * [#15124](https://github.com/thingsboard/thingsboard/pull/15124) Fixed CWE-770 in Jackson Core (GHSA-72hv-8253-57qq) by @ViacheslavKlimov
+  * [#15128](https://github.com/thingsboard/thingsboard/pull/15128) Fixed CVE-2026-27970 and CVE-2026-2391 by @vvlladd28
+  * Fixed CVE-2026-2781, CVE-2026-25646, CVE-2026-21945 and CVE-2026-21932 for Docker images by @ViacheslavKlimov and @smatvienko-tb
+
+* Major UI
+  * [#14944](https://github.com/thingsboard/thingsboard/pull/14944) Angular 20 migration by @ikulikov
+
+* Core & Rule Engine
+  * [#15054](https://github.com/thingsboard/thingsboard/pull/15054) Fixed getTimeseries API (/{entityType}/{entityId}/values/timeseries) by @dashevchenko
+  * [#15058](https://github.com/thingsboard/thingsboard/pull/15058) Added Cassandra result set byte-size limit by @ViacheslavKlimov
+  * [#15078](https://github.com/thingsboard/thingsboard/pull/15078) Fixed TBEL script execution failures on repeated runs by @ViacheslavKlimov
+  * [#15101](https://github.com/thingsboard/thingsboard/pull/15101) Fixed blocking JPA queries on access-validator single thread by @dskarzh
+  * [#15100](https://github.com/thingsboard/thingsboard/pull/15100) Fixed preservation of rule node execution counter in delay and deduplication nodes by @dskarzh
+  * [#15120](https://github.com/thingsboard/thingsboard/pull/15120) Improved Apple OAuth2 mapper and refactored OAuth2 client validation by @ViacheslavKlimov
+  * [#15102](https://github.com/thingsboard/thingsboard/pull/15102) Fixed infinite loop when rule chain input node forwards to its own rule chain by @smatvienko-tb
+  * [#15116](https://github.com/thingsboard/thingsboard/pull/15116) Made max WS message size configurable by @DmytroKhylko
+
+* UI
+  * [#14985](https://github.com/thingsboard/thingsboard/pull/14985) Fixed Redirect Url encoding by @mtsymbarov-del
+  * [#14959](https://github.com/thingsboard/thingsboard/pull/14959) Fixed loading and placement of Material icons by @mtsymbarov-del
+  * [#14978](https://github.com/thingsboard/thingsboard/pull/14978) Fixed Popover placement for Marker, Polygon and Circle overlay config by @mtsymbarov-del
+  * [#15018](https://github.com/thingsboard/thingsboard/pull/15018) Fixed adaptive in mail server configuration by @vvlladd28
+  * [#14964](https://github.com/thingsboard/thingsboard/pull/14964) Fixed Range and Bar chart limits setup by @mtsymbarov-del
+  * [#15031](https://github.com/thingsboard/thingsboard/pull/15031) Fixed RGBA and HSLA inputs in color picker by @mtsymbarov-del
+  * [#15080](https://github.com/thingsboard/thingsboard/pull/15080) Fixed Entity key autocomplete change check by @mtsymbarov-del
+  * [#15071](https://github.com/thingsboard/thingsboard/pull/15071) Fixed a race condition causing the toast component by @mtsymbarov-del
+  * [#15097](https://github.com/thingsboard/thingsboard/pull/15097) Fixed a race condition when init image map by @mtsymbarov-del
+  * [#15108](https://github.com/thingsboard/thingsboard/pull/15108) Fixed default timewindow config in widget editor page by @vvlladd28
+  * [#15142](https://github.com/thingsboard/thingsboard/pull/15142) Removed pattern validation from name field on CF by @mtsymbarov-del
+  * [#15096](https://github.com/thingsboard/thingsboard/pull/15096) Updated Ukrainian locale by @vvlladd28
+  * [#15130](https://github.com/thingsboard/thingsboard/pull/15130) Extend modules map: moment-timezone, canvas-gauges and ngx-hm-carousel added by @ChantsovaEkaterina
+
+* Transport
+  * [#14760](https://github.com/thingsboard/thingsboard/pull/14760) Fixed Sparkplug BIRTH message validation for metrics with empty string values by @nickAS21
+
+* Edge
+  * [#15050](https://github.com/thingsboard/thingsboard/pull/15050) Event-sourced propagation for admin settings by @volodymyr-babak
+
+**Full Changelog**: [https://github.com/thingsboard/thingsboard/compare/v4.3.0.1...v4.3.1](https://github.com/thingsboard/thingsboard/compare/v4.3.0.1...v4.3.1)

docs/pe/releases/releases-table/v4-2-x.md

@@ -6,10 +6,10 @@ breadcrumbs: 'true'
 breadcrumbs-steps: '1'
 lts: 'true'
 release-date: Aug 15, 2025
-last-updated: Mar 09, 2026
+last-updated: Mar 10, 2026
 release-note-label: Reporting 2.0, Secrets Storage, AI Rule Node
 active-menu-item-click: 'true'
-latest-patch: v4.2.2 (Mar 09 2026)
+latest-patch: v4.2.2 (Mar 10 2026)
 effective-url: '/docs/pe/releases/releases-table/'
 ---
 * TOC

docs/pe/releases/releases-table/v4-3-x.md

@@ -6,14 +6,15 @@ breadcrumbs: 'true'
 breadcrumbs-steps: '1'
 lts: 'true'
 release-date: Jan 20, 2026
-last-updated: Feb 3, 2026
+last-updated: Mar 10, 2026
 release-note-label: Alarm Rules 2.0 & new Calculated Fields
 active-menu-item-click: 'true'
-latest-patch: v4.3.0.1 (Feb 3 2026)
+latest-patch: v4.3.1 (Mar 10 2026)
 effective-url: '/docs/pe/releases/releases-table/'
 ---
 * TOC
 {:toc}
 
+{% include docs/pe/releases/releases-table/v4-3-1.md %}
 {% include docs/pe/releases/releases-table/v4-3-0-1.md %}
 {% include docs/pe/releases/releases-table/v4-3-0.md %}

docs/releases/releases-table/v4-2-x.md

@@ -6,10 +6,10 @@ breadcrumbs: 'true'
 breadcrumbs-steps: '1'
 lts: 'true'
 release-date: Aug 15, 2025
-last-updated: Mar 09, 2026
+last-updated: Mar 10, 2026
 release-note-label: AI Rule Node & Security Fixes
 active-menu-item-click: 'true'
-latest-patch: v4.2.2 (Mar 09 2026)
+latest-patch: v4.2.2 (Mar 10 2026)
 effective-url: '/docs/releases/releases-table/'
 ---
 * TOC

docs/releases/releases-table/v4-3-x.md

@@ -6,14 +6,15 @@ breadcrumbs: 'true'
 breadcrumbs-steps: '1'
 lts: 'true'
 release-date: Jan 20, 2026
-last-updated: Feb 3, 2026
+last-updated: Mar 10, 2026
 release-note-label: Alarm Rules 2.0 & new Calculated Fields
 active-menu-item-click: 'true'
-latest-patch: v4.3.0.1 (Feb 3 2026)
+latest-patch: v4.3.1 (Mar 10 2026)
 effective-url: '/docs/releases/releases-table/'
 ---
 * TOC
 {:toc}
 
+{% include docs/releases/releases-table/v4-3-1.md %}
 {% include docs/releases/releases-table/v4-3-0-1.md %}
 {% include docs/releases/releases-table/v4-3-0.md %}