WAF - WAF Release - 2025-12-03 - Emergency
UpdateUnverifiedAdded Sep 24, 2026
The WAF rule deployed yesterday to block unsafe deserialization-based RCE has been updated. The rule description now reads “React – RCE – CVE-2025-55182”, explicitly mapping to the recently disclosed React Server Components vulnerability. Detection logic remains unchanged.
Topics: Governance, Security
More Cloudflare developer platform releases
Every Cloudflare developer platform release| Date | Release | Type |
|---|---|---|
| Dec 3 | Email security - Reclassifications to Submissionsunverified Update | Update |
| Dec 4 | Hyperdrive - Connect to remote databases during local development with wrangler devunverified Update | Update |
| Dec 4 | Workers - One-click Access protection for Workers now creates reusable Cloudflare Access policiesunverified Preview | Preview |
| Dec 2 | WAF - WAF Release - 2025-12-02 - Emergencyunverified Update | Update |
| Dec 5 | Cloudflare Fundamentals, Terraform - Terraform v5.14.0 now availableunverified Update | Update |
| Dec 5 | WAF - Increased WAF payload limit for all plansunverified Update | Update |
| Dec 5 | WAF - Updating the WAF maximum payload valuesunverified Update | Update |
| Dec 1 | WAF - WAF Release - 2025-12-01unverified Update | Update |
Also shipped on Dec 3, 2025
Cloudflare in December 2025| Date | Company | Release | Product | Type |
|---|---|---|---|---|
| Dec 3 |  Deepgram | EU Endpoint Now Generally Availableunverified | Deepgram | GA |
| Dec 3 |  New Relic | eAPM General Availability and eBPF Network Metrics Public Previewunverified | New Relic | GA |
| Dec 3 |  NVIDIA | NeMo NVIDIA Neural Modules 2.6.0unverified | NeMo | Update |
| Dec 3 | Deepgram | Supported APIsunverified | Deepgram | Update |
| Dec 3 | Deepgram | Configurationunverified | Deepgram | Update |
| Dec 3 |  Netlify | Netlify’s response to the critical React & Next.js security vulnerabilityunverified | Netlify | Update |
Sources: each vendor's own release notes, changelogs and GitHub releases, read daily to monthly by how often it posts. Logos via logo.dev; trademarks belong to their owners.