Releasesby GlyphWAF - WAF Release - 2025-09-28 - Emergency
This week highlights multiple critical Cisco vulnerabilities (CVE-2025-20363, CVE-2025-20333, CVE-2025-20362). This flaw stems from improper input validation in HTTP(S) requests. An authenticated VPN user could send crafted requests to execute code as root, potentially compromising the device.
Also shipped Sep 28, 2025Cloudflare in September 2025 →
Bun v1.2.23
Fixes 119 issues (addressing 412 👍). pnpm-lock.yaml migration for seamless switching from pnpm to bun install, Redis Pub/Sub support, concurrent test execution with configurable parallelism, platform-specific dependency filtering with --cpu and --os flags, system CA certificates support with --use-system-ca, Windows code signing for compiled executables...
feldera 0.155.0
- sync: expose standby state as pipeline status [SQL] Fix several bugs related to MAPs Use JSON in place of YAML in most places
More from Cloudflare developer platformEvery Cloudflare developer platform release →
Radar - Regional Data in Cloudflare Radar
Radar now introduces Regional Data, providing traffic insights that bring a more localized perspective to the traffic trends shown on Radar. The following API endpoints are now available: Get Geolocation - Retrieves geolocation by geoId . List Geolocations - Lists geolocations. NetFlows Summary By Dimension - Retrieves NetFlows summary by dimension.
WAF Release - 2025-09-29
This week highlights four important vendor- and component-specific issues: an authentication bypass in SimpleHelp (CVE-2024-57727), an information-disclosure flaw in Flowise Cloud (CVE-2025-58434), an SSRF in the WordPress plugin Ditty (CVE-2025-8085), and a directory-traversal bug in Vite (CVE-2025-30208).
Cloudflare One Client - WARP client for Windows (version 2025.7.176.0)
A new GA release for the Windows WARP client is now available on the stable releases downloads page . This release contains minor fixes and improvements. Changes and improvements MASQUE is now the default tunnel protocol for all new WARP device profiles.
Cloudflare One Client - WARP client for macOS (version 2025.7.176.0)
A new GA release for the macOS WARP client is now available on the stable releases downloads page . This release contains minor fixes and improvements. Changes and improvements Fixed a bug preventing the warp-diag captive-portal command from running successfully due to the client not parsing SSID on macOS.
Cloudflare One Client - WARP client for Linux (version 2025.7.176.0)
A new GA release for the Linux WARP client is now available on the stable releases downloads page . This release contains minor fixes and improvements including an updated public key for Linux packages. The public key must be updated if it was installed before September 12, 2025 to ensure the repository remains functional after December 4, 2025.
Gateway - Application granular controls for operations in SaaS applications
Gateway users can now apply granular controls to their file sharing and AI chat applications through HTTP policies . The new feature offers two methods of controlling SaaS applications: Application Controls are curated groupings of Operations which provide an easy way for users to achieve a specific outcome.
WAF Release - 2025-09-26
Managed Ruleset Updated This update introduces 11 new detections in the Cloudflare Managed Ruleset (all currently set to Disabled mode to preserve remediation logic and allow quick activation if needed).
Workers - Automatic loopback bindings via ctx.exports
The ctx.exports API contains automatically-configured bindings corresponding to your Worker's top-level exports. For each top-level export extending WorkerEntrypoint , ctx.exports will contain a Service Binding by the same name, and for each export extending DurableObject (and for which storage has been configured via a migration ), ctx.exports will contain...