WAF - WAF Release - 2025-09-24 - Emergency
This week highlights a critical vendor-specific vulnerability: a deserialization flaw in the License Servlet of Fortra’s GoAnywhere MFT. By forging a license response signature, an attacker can trigger deserialization of arbitrary objects, potentially leading to command injection.
Also shipped Sep 24, 2025Cloudflare in September 2025 →
For jobs that use GPUs, Dataflow now supports the flex-start provisioning model
For jobs that use GPUs, Dataflow now supports the flex-start provisioning model. This flex-start provisioning model can improve your ability to get access to constrained GPU resources for short-duration workloads. This feature is available in Preview and is for batch pipelines only. For more information, see Configure a provisioning model .
Figma integration for Zapier
Now you can use the Figma integration with Zapier to connect Figma to thousands of other tools without writing code.
More from Cloudflare developer platformEvery Cloudflare developer platform release →
Pipelines now supports SQL transformations and Apache Iceberg
Today, we're launching the new Cloudflare Pipelines : a streaming data platform that ingests events, transforms them with SQL , and writes to R2 as Apache Iceberg ↗ tables or Parquet files. Pipelines can receive events via HTTP endpoints or Worker bindings , transform them with SQL, and deliver to R2 with exactly-once guarantees.
R2 SQL - Announcing R2 SQL
Today, we're launching the open beta for R2 SQL : A serverless, distributed query engine that can efficiently analyze petabytes of data in Apache Iceberg ↗ tables managed by R2 Data Catalog . R2 SQL is ideal for exploring analytical and time-series data stored in R2, such as logs, events from Pipelines , or clickstream and user behavior data.
Browser Run - Browser Rendering Playwright GA, Stagehand support (Beta), and higher limits
We’re shipping three updates to Browser Rendering: Playwright support is now Generally Available and synced with Playwright v1.55 ↗ , giving you a stable foundation for critical automation and AI-agent workflows. We’re also adding Stagehand support (Beta) so you can combine code with natural language instructions to build more resilient automations.
AI Search (formerly AutoRAG) now with More Models To Choose From
AutoRAG is now AI Search! The new name marks a new and bigger mission: to make world-class search infrastructure available to every developer and business. With AI Search you can now use models from different providers like OpenAI and Anthropic.
Containers - Run more Containers with higher resource limits
You can now run more Containers concurrently with higher limits on CPU, memory, and disk. Limit New Limit Previous Limit Memory for concurrent live Container instances 400GiB 40GiB vCPU for concurrent live Container instances 100 20 Disk for concurrent live Container instances 2TB 100GB You can now run 1000 instances of the dev instance type, 400 instances...
Gateway, Data Loss Prevention - Refine DLP Scans with New Body Phase Selector
You can now more precisely control your HTTP DLP policies by specifying whether to scan the request or response body, helping to reduce false positives and target specific data flows. In the Gateway HTTP policy builder, you will find a new selector called Body Phase .
Cloudflare Fundamentals - Sign in with GitHub
Cloudflare has launched sign in with GitHub as a log in option. This feature is available to all users with a verified email address who are not using SSO. To use it, simply click on the Sign in with GitHub button on the dashboard login page. You will be logged in with your primary GitHub email address. For more information Log in to Cloudflare
Cloudflare Fundamentals - SSO for all
Single sign-on (SSO) streamlines the process of logging into Cloudflare for Enterprise customers who manage a custom email domain and manage their own identity provider. Instead of managing a password and two-factor authentication credentials directly for Cloudflare, SSO lets you reuse your existing login infrastructure to seamlessly log in.