Security fixes in thingsboard 4.2.1.1-r1
Affects thingsboardSource GCVE Database
Fixed in 4.2.1.1-r1 : update thingsboard when convenient.
Data as of 09/09/2026, 13:38:50 UTC
Rated by Threat Radar
- Patch
- Available – fixed in 4.2.1.1-r1
What to do
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| CleanStartthingsboard | Affected
| Fixed in
|
Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.
AI-suggested
Upgrade to Thingsboard version 4.2.1.1-r1 to apply the security fixes for the four identified vulnerabilities. Since a patch is available and this version contains the fixes, no additional mitigation steps are required beyond applying this update.
Description
Thingsboard version 4.2.1.1-r1 addresses four distinct security vulnerabilities. This release includes security fixes that resolve these issues, improving the overall security posture of the software. No CVSS scores or detailed vulnerability descriptions are provided. There are no known exploits in the wild associated with these vulnerabilities at this time.
Impact
The vulnerabilities fixed in Thingsboard 4.2.1.1-r1 could potentially affect the security of deployments running earlier versions. However, no known exploits in the wild have been reported, and the exact impact of each vulnerability is not detailed in the provided information.
Summary
The Thingsboard package version 4.2.1.1-r1 contains fixes for four security vulnerabilities identified by GHSA identifiers ghsa-6rw7-vpxm-498p, ghsa-8qq5-rm4j-mr97, ghsa-wqch-xfxh-vrr4, and ghsa-73rr-hh4g-fpgx. The vulnerabilities are addressed in this specific version, which is not a cloud service. No further technical details or CVSS scores are available in the provided data.