What's Changed

Security

• Fixed CVE-2025-69420 and CVE-2025-69419 for Docker images by @ViacheslavKlimov and @smatvienko-tb
• Fixed CVE-2026-22610 by @vvlladd28 in https://github.com/thingsboard/thingsboard/pull/14865

Core & Rule Engine

• Fixed propagation path updates handling for propagation CF by @ShvaykaD in https://github.com/thingsboard/thingsboard/pull/14853
• Fixed unnecessary database updates for disabled users during failed login by @AndriiLandiak in https://github.com/thingsboard/thingsboard/pull/14751

UI

• Updated locales el_GR, es_ES, hi_IN, nl_NL, no_NO by @vvlladd28 in https://github.com/thingsboard/thingsboard/pull/14920
• Fixed form settings in Send RPC and Segmented Button widgets by @mtsymbarov-del in https://github.com/thingsboard/thingsboard/pull/14863
• Fixed help link for API key by @vvlladd28 in https://github.com/thingsboard/thingsboard/pull/14864
• Removed required from "Current Customer" field in entity alias by @mtsymbarov-del in https://github.com/thingsboard/thingsboard/pull/14816
• Fixed missing '%' character in alias help text by @mtsymbarov-del in https://github.com/thingsboard/thingsboard/pull/14903
• Fixed default settings in API Usage widget by @mtsymbarov-del in https://github.com/thingsboard/thingsboard/pull/14909
• Fixed padding in Range Chart and Bar Chart with label widgets when overlay enabled by @mtsymbarov-del in https://github.com/thingsboard/thingsboard/pull/14895
• Fixed errors when public user views alarm comments by @mtsymbarov-del in https://github.com/thingsboard/thingsboard/pull/14922
• Fixed errors in alarm rules by @ArtemDzhereleiko in https://github.com/thingsboard/thingsboard/pull/14941
• Fixed race condition during Power Button widget initialization by @mtsymbarov-del in https://github.com/thingsboard/thingsboard/pull/14925

Full Changelog: https://github.com/thingsboard/thingsboard/compare/v4.3...v4.3.0.1