Releasesby GlyphWAF - WAF Release - 2025-11-03
This week highlights enhancements to detection signatures improving coverage for vulnerabilities in Adobe Commerce and Magento Open Source, linked to CVE-2025-54236. Key Findings This vulnerability allows unauthenticated attackers to take over customer accounts through the Commerce REST API and, in certain configurations, may lead to remote code execution.
Also shipped Nov 3, 2025Cloudflare in November 2025 →
Workflows are now in Alpha and I already broke mine
PostHog introduced Workflows in alpha, an automation builder that triggers actions based on live user behavior and event data.
2.32.0 (2025-10-28)
Features Adds Python 3.14 support ( #1512 ) ( 95a2690 ) Debug logs ( #1460 ) ( b5d4a45 ) Support the protocol version in StreamingPullRequest ( #1455 ) ( e6294a1 ) Bug Fixes Ignore future warnings on python versions ( #1546 ) ( 8e28dea )
2.33.0 (2025-10-30)
Features Add AwsKinesisFailureReason.ApiViolationReason ( ac68093 ) Add tags to Subscription, Topic, and CreateSnapshotRequest messages for use in CreateSubscription, CreateTopic, and CreateSnapshot requests respectively ( ac68093 ) Annotate some resource fields with their corresponding API types ( ac68093 ) Bug Fixes Deprecate credentials_file argument (...
Deployment setup monitoring
Enterprise customers can now get notified when deployments fail to start and customize how long to wait before timing out.
Subscription Page Updates
We’ve refreshed the Subscription experience to make it easier to understand your usage, see upcoming billing cycles, and manage your plan.
More from Cloudflare developer platformEvery Cloudflare developer platform release →
Workers - Capture Wrangler command output in structured format
You can now capture Wrangler command output in a structured ND-JSON ↗ format by setting the WRANGLER_OUTPUT_FILE_PATH or WRANGLER_OUTPUT_FILE_DIRECTORY environment variables.
Log Explorer now supports query cancellation
We're excited to announce that Log Explorer users can now cancel queries that are currently running. This new feature addresses a common pain point: waiting for a long, unintended, or misconfigured query to complete before you can submit a new, correct one.
Log Explorer now shows query result distribution
We're excited to announce a new feature in Log Explorer that significantly enhances how you analyze query results: the Query results distribution chart. This new chart provides a graphical distribution of your results over the time window of the query. Immediately after running a query, you will see the distribution chart above your result table.
D1, Workers - D1 can restrict data localization with jurisdictions
You can now set a jurisdiction when creating a D1 database to guarantee where your database runs and stores data. Jurisdictions can help you comply with data localization regulations such as GDPR. Supported jurisdictions include eu and fedramp .
Logs - Logpush Permission Update for Zero Trust Datasets
Permissions for managing Logpush jobs related to Zero Trust datasets (Access, Gateway, and DEX) have been updated to improve data security and enforce appropriate access controls.
WAF Release - 2025-11-05 - Emergency
This week’s emergency release introduces a new detection signature that enhances coverage for a critical vulnerability in the React Native Metro Development Server, tracked as CVE-2025-11953. Key Findings The Metro Development Server exposes an HTTP endpoint that is vulnerable to OS command injection (CWE-78).
Workers VPC - Announcing Workers VPC Services (Beta)
Workers VPC Services is now available, enabling your Workers to securely access resources in your private networks, without having to expose them on the public Internet.
Cloudflare One, Cloudflare WAN - Automatic Return Routing (Beta)
Magic WAN now supports Automatic Return Routing (ARR), allowing customers to configure Magic on-ramps (IPsec/GRE/CNI) to learn the return path for traffic flows without requiring static routes. Key benefits: Route-less mode : Static or dynamic routes are optional when using ARR.