WAF - WAF Release - 2025-10-13
UpdateUnverifiedAdded Sep 24, 2026
This week’s highlights include a new JinJava rule targeting a sandbox-bypass flaw that could allow malicious template input to escape execution controls. The rule improves detection for unsafe template rendering paths.
Topics: Security, Observability
More Cloudflare developer platform releases
Every Cloudflare developer platform release| Date | Release | Type |
|---|---|---|
| Oct 14 | AI Crawl Control - Enhanced AI Crawl Control metrics with new drilldowns and filtersunverified Update | Update |
| Oct 14 | Cloudflare Fundamentals - Single sign-on now manageable in the user experienceunverified Update | Update |
| Oct 16 | Cloudflare One Client - WARP client for Windows (version 2025.9.173.1)unverified Beta | Beta |
| Oct 16 | Cloudflare One Client - WARP client for macOS (version 2025.9.173.1)unverified Beta | Beta |
| Oct 16 | Durable Objects, Workers - View and edit Durable Object data in UI with Data Studio (Beta)unverified Beta | Beta |
| Oct 16 | Cloudflare Fundamentals - Increased HTTP header size limit to 128 KBunverified Update | Update |
| Oct 16 | Load Balancing - Monitor Groups for Advanced Health Checking With Load Balancingunverified Update | Update |
| Oct 10 | Gateway - New domain categories addedunverified Update | Update |
Also shipped on Oct 13, 2025
Cloudflare in October 2025| Date | Company | Release | Product | Type |
|---|---|---|---|---|
| Oct 13 |  Google Cloud | 1.142.0 (2025-10-07)unverified | Pub/Sub | Update |
| Oct 13 |  New Relic | New Relic AWS Metric Streams Integration Now Supports OpenTelemetry 1.0 Formatunverified | New Relic | Update |
| Oct 13 |  Shopify | Fulfillment service callback url is now optionalunverified | Shopify developer platform | Update |
Sources: each vendor's own release notes, changelogs and GitHub releases, read daily to monthly by how often it posts. Logos via logo.dev; trademarks belong to their owners.