Releasesby GlyphWAF - WAF Release - 2025-10-06
This week’s highlights prioritise an emergency Oracle E-Business Suite RCE rule deployed to block active, high-impact exploitation. Also addressed are high-severity Chaos Mesh controller command-injection flaws that enable unauthenticated in-cluster RCE and potential cluster compromise, plus a form-data multipart boundary issue that permits HTTP Parameter...
Also shipped Oct 6, 2025Cloudflare in October 2025 →
Cost Management and Billing Application
Manage and optimize your Grafana Cloud usage and spend with a new experience We’re excited to announce the general availability of the Cost Management and Billing app for Grafana Cloud! This redesigned experience provides a central place to manage all your Grafana Cloud usage and spend.
2.2.0 (2025-10-03)
Features pubsub/v2: Support the protocol version in StreamingPullRequest ( #12985 ) ( 4e8c9d5 ) Bug Fixes pubsub/v2: Respect ShutdownBehavior when handling timeout ( #13021 ) ( 0135d93 )
We're gradually introducing multi-token streaming across our models
We're gradually introducing multi-token streaming across our models. Instead of sending tokens individually, we'll now deliver them in batches through 200 evenly-spaced events per second. This change eliminates the artificial delays that occurred with single-token streaming.
GPT 5 Pro now available in the AI Gateway
GPT-5 Pro is now available through Netlify’s AI Gateway , no extra setup required. You can use the OpenAI SDK directly, without needing to manage API keys or external accounts.
Turn your ChatGPT brainstorms into FigJam diagrams
We've launched the ability to create FigJam diagrams directly from ChatGPT. Transform conversations, documents, and photos into jumping off points for collaboration.
More from Cloudflare developer platformEvery Cloudflare developer platform release →
R2, R2 Data Catalog - R2 Data Catalog table-level compaction
You can now enable compaction for individual Apache Iceberg ↗ tables in R2 Data Catalog , giving you fine-grained control over different workloads. # Enable compaction for a specific table (no token required) npx wrangler r2 bucket catalog compaction enable < BUCKE T > < NAMESPAC E > < TABL E > --target-size 256 This allows you to: Apply different target...
Radar - Browser Support Detection for PQ Encryption on Cloudflare Radar
Radar now includes browser detection for Post-quantum (PQ) encryption. The Post-quantum encryption card ↗ now checks whether a user’s browser supports post-quantum encryption. If support is detected, information about the key agreement in use is displayed.
Cloudflare One Client - WARP client for Linux (version 2025.8.779.0)
A new GA release for the Linux WARP client is now available on the stable releases downloads page . This release contains significant fixes and improvements including an updated public key for Linux packages. The public key must be updated if it was installed before September 12, 2025 to ensure the repository remains functional after December 4, 2025.
Cloudflare One Client - WARP client for Windows (version 2025.8.779.0)
A new GA release for the Windows WARP client is now available on the stable releases downloads page . This release contains significant fixes and improvements. Changes and improvements Proxy mode has been enhanced for even faster resolution.
Cloudflare One Client - WARP client for macOS (version 2025.8.779.0)
A new GA release for the macOS WARP client is now available on the stable releases downloads page . This release contains significant fixes and improvements. Changes and improvements Proxy mode has been enhanced for even faster resolution.
Cloudflare Fundamentals - Automated reminders for backup codes
The most common reason users contact Cloudflare support is lost two-factor authentication (2FA) credentials. Cloudflare supports both app-based and hardware keys for 2FA, but you could lose access to your account if you lose these.
WAF Release - 2025-10-07 - Emergency
This week highlights multiple critical Cisco vulnerabilities (CVE-2025-20363, CVE-2025-20333, CVE-2025-20362). This flaw stems from improper input validation in HTTP(S) requests. An authenticated VPN user could send crafted requests to execute code as root, potentially compromising the device.
Workers - New Overview Page for Cloudflare Workers
Each of your Workers now has a new overview page in the Cloudflare dashboard. The goal is to make it easier to understand your Worker without digging through multiple tabs. Think of it as a new home base, a place to get a high-level overview on what's going on.