WAF - WAF Release - 2025-11-10
UpdateUnverifiedAdded Sep 24, 2026
This week’s release introduces new detections for Prototype Pollution across three common vectors: URI, Body, and Header/Form. Key Findings These attacks can affect both API and web applications by altering normal behavior or bypassing security controls.
Topics: Vector search, Security, Observability, Developer tools
More Cloudflare developer platform releases
Every Cloudflare developer platform release| Date | Release | Type |
|---|---|---|
| Nov 10 | AI Crawl Control - Crawler drilldowns with extended actions menuunverified Update | Update |
| Nov 11 | Cloudflare One Client - WARP client for Windows (version 2025.9.558.0)unverified GA | GA |
| Nov 11 | Cloudflare One Client - WARP client for macOS (version 2025.9.558.0)unverified GA | GA |
| Nov 11 | Cloudflare One Client - WARP client for Linux (version 2025.9.558.0)unverified GA | GA |
| Nov 11 | Log Explorer - Resize your custom SQL window in Log Explorerunverified Update | Update |
| Nov 11 | Logs - Logpush Health Dashboardsunverified Update | Update |
| Nov 11 | Cloudflare Tunnel, Cloudflare Tunnel for SASE - cloudflared proxy-dns command will be removed starting February 2, 2026unverified Deprecation | Deprecation |
| Nov 9 | Workers - Select Wrangler environments using the CLOUDFLARE_ENV environment variableunverified Update | Update |
Also shipped on Nov 10, 2025
Cloudflare in November 2025| Date | Company | Release | Product | Type |
|---|---|---|---|---|
| Nov 10 |  Modal | Modal 1.2.2unverified | Modal | Update |
| Nov 10 |  NVIDIA | NeMo NVIDIA Neural Modules 2.5.3unverified | NeMo | Update |
| Nov 10 |  Deepgram | Entity Detection Now Available for Streaming Speech-to-Textunverified | Deepgram | Update |
| Nov 10 |  Netlify | React Router 7 apps can now be deployed to Edge Functionsunverified | Netlify | Update |
| Nov 10 |  Notion | Agent now reads CSVsunverified | Notion | Update |
| Nov 10 |  Sentry | Log Drains for Cloudflare, Vercel, Heroku, and Supabaseunverified | Sentry | Update |
Sources: each vendor's own release notes, changelogs and GitHub releases, read daily to monthly by how often it posts. Logos via logo.dev; trademarks belong to their owners.