API Shield - New BOLA Vulnerability Detection for API Shield
UpdateUnverifiedAdded Sep 24, 2026
Now, API Shield automatically searches for and highlights Broken Object Level Authorization (BOLA) attacks on managed API endpoints. API Shield will highlight both BOLA enumeration attacks and BOLA pollution attacks, telling you what was attacked, by who, and for how long.
Topics: Governance, Security, Observability, Developer tools
More Cloudflare developer platform releases
Every Cloudflare developer platform release| Date | Release | Type |
|---|---|---|
| Nov 12 | Digital Experience Monitoring - DEX Logpush jobsunverified Update | Update |
| Nov 12 | Workers Analytics Engine, Workers - More SQL aggregate, date and time functions available in Workers Analytics Engineunverified Update | Update |
| Nov 13 | Log Explorer - Fixed custom SQL date picker inconsistenciesunverified Update | Update |
| Nov 13 | Log Explorer - Log Explorer adds 14 new datasetsunverified Update | Update |
| Nov 11 | Cloudflare One Client - WARP client for Windows (version 2025.9.558.0)unverified GA | GA |
| Nov 11 | Cloudflare One Client - WARP client for macOS (version 2025.9.558.0)unverified GA | GA |
| Nov 11 | Cloudflare One Client - WARP client for Linux (version 2025.9.558.0)unverified GA | GA |
| Nov 11 | Log Explorer - Resize your custom SQL window in Log Explorerunverified Update | Update |
Also shipped on Nov 12, 2025
Cloudflare in November 2025| Date | Company | Release | Product | Type |
|---|---|---|---|---|
| Nov 12 | Use Deepgram's Managed Cartesia TTS Modelsunverified | Deepgram | Update | |
| Nov 12 | 🤖 Claude Haiku 4.5 LLM Supportunverified | Deepgram | Update | |
| Nov 12 | DuckDB 1.4.2 Bugfix Releaseunverified | DuckDB | Update | |
| Nov 12 | New Dynamic Client Registration (DCR) Scope Added to Tenant ACLunverified | Auth0 | Update | |
| Nov 12 | New Management API endpoints to configure Bot Detection settingsunverified | Auth0 | Update | |
| Nov 12 | Actions - TypeScript Definitions in NPMunverified | Auth0 | Update |
Sources: each vendor's own release notes, changelogs and GitHub releases, read daily to monthly by how often it posts. Logos via logo.dev; trademarks belong to their owners.