Releasesby GlyphWAF - WAF Release - 2025-10-20
This week’s update introduces an enhanced rule that expands detection coverage for a critical vulnerability in Oracle E-Business Suite. It also improves an existing rule to provide more reliable coverage in request processing.
Also shipped Oct 20, 2025Cloudflare in October 2025 →
2.2.1 (2025-10-14)
Bug Fixes pubsub/v2: Avoid Receive hang on context cancellation ( #13114 ) ( e7e169d ) pubsub/v2: Upgrade gRPC service registration func ( 8fffca2 )
New Logs Context
Following up the completely redesigned logs panel, we’ve rebuilt log context around it, improving existing features and enabling new capabilities. Log context is a feature that displays additional lines of logs surrounding a log entry that matches a specific search query.
feldera 0.166.0
- py: add minor fixes to the illegal argument tests [DOCS] Functions with the same name were documented only once [SQLLIB] Add more information in panic message for failures in parsing TIMESTAMPS
More from Cloudflare developer platformEvery Cloudflare developer platform release →
Gateway - Schedule DNS policies from the UI
Admins can now create scheduled DNS policies directly from the Zero Trust dashboard, without using the API. You can configure policies to be active during specific, recurring times, such as blocking social media during business hours or gaming sites on school nights.
AI Crawl Control - New Robots.txt tab for tracking crawler compliance
AI Crawl Control now includes a Robots.txt tab that provides insights into how AI crawlers interact with your robots.txt files. What's new The Robots.txt tab allows you to: Monitor the health status of robots.txt files across all your hostnames, including HTTP status codes, and identify hostnames that need a robots.txt file.
WAF Release - 2025-10-23 - Emergency
This week highlights enhancements to detection signatures improving coverage for vulnerabilities in Adobe Commerce and Magento Open Source, linked to CVE-2025-54236. Key Findings This vulnerability allows unauthenticated attackers to take over customer accounts through the Commerce REST API and, in certain configurations, may lead to remote code execution.
Workers AI Markdown Conversion: New endpoint to list supported formats
Developers can now programmatically retrieve a list of all file formats supported by the Markdown Conversion utility in Workers AI. You can use the env.AI binding: await env. AI . toMarkdown ().
Workers Preview URL default behavior now matches your workers.dev setting
We have updated the default behavior for Cloudflare Workers Preview URLs . Going forward, if a preview URL setting is not explicitly configured during deployment, its default behavior will automatically match the setting of your workers.dev subdomain .
Email security - On-Demand Security Report
You can now generate on-demand security reports directly from the Cloudflare dashboard. This new feature provides a comprehensive overview of your email security posture, making it easier than ever to demonstrate the value of Cloudflare’s Email security to executives and other decision makers.
Security Center - New Application Security reports (Closed Beta)
Cloudflare's new Application Security report , currently in Closed Beta, is now available in the dashboard. Go to Security reports ↗ The reports are generated monthly and provide cyber security insights trends for all of the Enterprise zones in your Cloudflare account.
WAF - New detections released for WAF managed rulesets
This week we introduced several new detections across Cloudflare Managed Rulesets, expanding coverage for high-impact vulnerability classes such as SSRF, SQLi, SSTI, Reverse Shell attempts, and Prototype Pollution.