thingsboard

All-in-one IoT platform for data collection, processing, visualization, and device management. 💡 Get started • 🌐 Website • 📚 Documentation • 📔 Blog • 🔗 LinkedIn 🚀 Installation options Install ThingsBoard on-premises or use ThingsBoard Cloud. 💡 Getting started with ThingsBoard Check out our Gettin...

CVE-2026-40895 vulnerabilities

Vulnerabilities for packages: argo-workflows, langfuse, nextcloud-server, thingsboard, lerna, code-server, configurable-http-proxy, opensearch-dashboards, saf, prism, kubeflow-pipelines, kubeflow-katib...

GHSA-G3HV-75WG-M249 vulnerabilities

Vulnerabilities for packages: renovate, foxx-cli, vitess, saf, thingsboard-fips, authentik, langfuse-fips, opensearch-dashboards, graalvm, lerna, commitizen, kibana, pulumi, unleash-proxy, rancher-api-ui, gemini-cli, arangodb, tileserver-gl-fips, dotstatsuite-supercore, lambda-nodejs, thingsboard...

CVE-2026-118764 vulnerabilities

Vulnerabilities for packages: renovate, foxx-cli, vitess, saf, thingsboard-fips, authentik, langfuse-fips, opensearch-dashboards, graalvm, lerna, commitizen, kibana, pulumi, unleash-proxy, rancher-api-ui, gemini-cli, arangodb, tileserver-gl-fips, dotstatsuite-supercore, lambda-nodejs, thingsboard...

thingsboard-ssrf-cve-2025-34282

CVE-2025-34282 — ThingsBoard SSRF via SVG Image Upload Overview Server-Side Request Forgery SSRF vulnerability in ThingsBoard IoT Platform versions before 4.2.1. An attacker with Tenant Admin access can upload a crafted SVG file containing an internal URL reference via the Image Upload Gallery...

CLEANSTART-2026-YJ38996 When applications specify HTTP response headers for servlet applications using Spring Security, there is the possibility that the HTTP Headers will not be written

Security vulnerability affects the thingsboard package. When applications specify HTTP response headers for servlet applications using Spring Security, there is the possibility that the HTTP Headers will not be written...

CLEANSTART-2026-CZ74284 Security fix for GHSA-52cp-r559-cp3m applied in: thingsboard 4.3.1.3-r3, thingsboard 4.3.1.3-r4, thingsboard 4.3.1.3-r5

Security vulnerability affects the thingsboard package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-GU83187 Security fix for GHSA-h67p-54hq-rp68 applied in: argo-workflows 3.6.19-r5, thingsboard 4.3.1.3-r3, thingsboard 4.3.1.3-r4, thingsboard 4.3.1.3-r5

GHSA-h67p-54hq-rp68 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-UP34519 Security fix for GHSA-wg6q-6289-32hp applied in: thingsboard 4.3.1-r0

Security vulnerability affects the thingsboard package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-AI35449 Security fix for GHSA-6hcq-hmm3-jj3c applied in: thingsboard 4.3.1-r0

Security vulnerability affects the thingsboard package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-OO21154 Security fix for GHSA-9m3c-qcxr-9x87 applied in: thingsboard 4.3.1-r0

Security vulnerability affects the thingsboard package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-QD84696 Security fix for GHSA-4cx2-fc23-5wg6 applied in: thingsboard 4.3.1-r0

Security vulnerability affects the thingsboard package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-VU83765 Security fix for GHSA-5qcv-4rpc-jp93 applied in: thingsboard 4.3.1-r0

Security vulnerability affects the thingsboard package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-QH52891 Security fix for GHSA-c3fc-8qff-9hwx applied in: thingsboard 4.3.1-r0

Security vulnerability affects the thingsboard package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-AL27907 Security fix for GHSA-4773-3jfm-qmx3 applied in: thingsboard 4.3.1-r0

Security vulnerability affects the thingsboard package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-HX71164 Security fix for GHSA-x4m4-345f-5h5g applied in: thingsboard 4.3.1-r0

Security vulnerability affects the thingsboard package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-KW68132 Security fix for GHSA-rv64-5gf8-9qq8 applied in: thingsboard 4.3.1-r0

Security vulnerability affects the thingsboard package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-HC35011 Security fix for GHSA-mgp5-rv84-w37q applied in: thingsboard 4.3.1-r0

Security vulnerability affects the thingsboard package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-EZ94144 Security fix for GHSA-24j9-x2wg-9qv6 applied in: thingsboard 4.3.1-r0

Security vulnerability affects the thingsboard package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-QA81086 Security fix for GHSA-8mc5-53m5-3qj2 applied in: thingsboard 4.3.1-r0

Security vulnerability affects the thingsboard package. This issue is resolved in later releases. See references for vulnerability details...