Releasesby GlyphWAF - WAF Release - 2025-11-24
This week highlights enhancements to detection signatures improving coverage for vulnerabilities in FortiWeb, linked to CVE-2025-64446, alongside new detection logic expanding protection against PHP Wrapper Injection techniques. Key Findings This vulnerability enables an unauthenticated attacker to bypass access controls by abusing the CGIINFO header.
Also shipped Nov 24, 2025Cloudflare in November 2025 →
Convex Vercel Marketplace Integration
Convex is now available for deployment via the Vercel Marketplace, enabling one-click installation for Vercel customers.
Express Configuration is now Generally Available for Auth0 SaaS apps in the Okta Integration Network
We’re pleased to announce that Express Configuration with Okta is now generally available for Auth0 applications in the [Okta Integration Network](https://www.okta.com/integrations/)! Express Configuration automates how your enterprise customers using Okta set up identity integrations with your Auth0 application.
Debug Guides and Surveys with the Amp Chrome Extension
Description: • Quick access to verify SDK Setup • Troubleshoot guides and surveys or Preview one directly • View user properties • View all forwarded events or send a test event to trigger a g/s Why: Knowing and running JS console commands is a hurdle for customers who need visibility into G/S setup.
We now support Predicted Outputs for faster generation when large portions of the output are known in advance
We now support Predicted Outputs for faster generation when large portions of the output are known in advance. Provide a draft of the expected response via the prediction field, and the model will efficiently reuse unchanged tokens while regenerating only those that differ. Ideal for code editing, document revisions, and template-based responses.
Nova-3 Model Update
🎯 Nova-3 supports 10 new languages We've added support for 10 new languages with non-English monolingual Nova-3 models. This continues our effort to significantly expand Nova-3 language support beyond English.
Claude Opus 4.5 now live in AI Gateway, plus latest Claude Code via Agent Runners
Anthropic's Claude Opus 4.5 model is now available through Netlify's AI Gateway with zero configuration required. Use the Anthropic SDK directly in your Netlify Functions without managing API keys or authentication. The AI Gateway handles everything automatically.
More from Cloudflare developer platformEvery Cloudflare developer platform release →
Radar - Cloud Services Observability in Cloudflare Radar
Radar introduces HTTP Origins insights, providing visibility into the status of traffic between Cloudflare's global network and cloud-based origin infrastructure. The new Origins API provides provides the following endpoints: /origins - Lists all origins (cloud providers and associated regions).
API Shield - New Zombie API detection for API Shield
API Shield now automatically detects zombie endpoints , saved endpoints that have not received traffic for an extended period. When detected, the cf-risk-zombie risk label is applied. The scan runs daily alongside existing risk scans. Endpoints are labeled after 32 days without traffic.
Cache - Audit Logs for Cache Purge Events
You can now review detailed audit logs for cache purge events, giving you visibility into what purge requests were sent, what they contained, and by whom. Audit your purge requests via the Dashboard or API for all purge methods: Purge everything List of prefixes List of tags List of hosts List of files Example The detailed audit payload is visible within...
Workers AI - Launching FLUX.2 [dev] on Workers AI
We've partnered with Black Forest Labs (BFL) to bring their latest FLUX.2 [dev] model to Workers AI! This model excels in generating high-fidelity images with physical world grounding, multi-language support, and digital asset creation. You can also create specific super images with granular controls like JSON prompting.
Agents, Workers - Agents SDK v0.2.24 with resumable streaming, MCP improvements, and schedule fixes
The latest release of @cloudflare/agents ↗ brings resumable streaming, significant MCP client improvements, and critical fixes for schedules and Durable Object lifecycle management. Resumable streaming AIChatAgent now supports resumable streaming, allowing clients to reconnect and continue receiving streamed responses without losing data.
Containers, R2 - Mount R2 buckets in Containers
Containers now support mounting R2 buckets as FUSE (Filesystem in Userspace) volumes, allowing applications to interact with R2 using standard filesystem operations.
Containers - New CPU Pricing for Containers and Sandboxes
Containers and Sandboxes pricing for CPU time is now based on active usage only, instead of provisioned resources. This means that you now pay less for Containers and Sandboxes. An Example Before and After Imagine running the standard-2 instance type for one hour, which can use up to 1 vCPU, but on average you use only 20% of your CPU capacity.
Security Center - Threat insights are now available in the Threat Events platform
The threat events platform now has threat insights available for some relevant parent events. Threat intelligence analyst users can access these insights for their threat hunting activity.