Releasesby GlyphWAF - Updating the WAF maximum payload values
We are reinstating the maximum request-payload size the Cloudflare WAF inspects, with WAF on Enterprise zones inspecting up to 128 KB. Key Findings On December 5, 2025 , we initially attempted to increase the maximum WAF payload limit to 1 MB across all plans.
Also shipped Dec 5, 2025Cloudflare in December 2025 →
Introducing Supabase for Platforms
Supabase for Platforms allows businesses to use Supabase as the underlying infrastructure for their own tools and services.
70 projects on Free plan, new Data API settings, Neon is now a Kiro Power release - Dec 05, 2025
70 projects on the Free plan. We've increased the project limit on the Free plan to 70 projects. That's 70 separate database projects you can spin up, experimen...
Pay-as-you-go Pricing
Learn how you can enable pay-as-you-go pricing for your transactional email plans.
The little things, week ending December 5, 2025
A collection of updates to Replicate for the week ending December 5, 2025.
What's new in Sigma
AI Ask Sigma supports data model relationships and Snowflake semantic views When Ask Sigma responds to questions with a data model or Snowflake semantic view, Ask Sigma can join related tables to provide higher-quality answers. For more details, see Ask natural language queries with Ask Sigma .
Smart Canvas, Magic Config IV
December is here and so is our final stretch of shipping before the holidays. While everyone else is debating whether it's too early to play Christmas music (it's not), we've been heads-down making Railway smarter about telling you what's actually going on with your services. This week is all about visibility.
More from Cloudflare developer platformEvery Cloudflare developer platform release →
Cloudflare Fundamentals, Terraform - Terraform v5.14.0 now available
Earlier this year, we announced the launch of the new Terraform v5 Provider. We are aware of the high number of issues reported by the Cloudflare community related to the v5 release. We have committed to releasing improvements on a 2-3 week cadence ↗ to ensure its stability and reliability, including the v5.14 release.
WAF - Increased WAF payload limit for all plans
Cloudflare WAF now inspects request-payload size of up to 1 MB across all plans to enhance our detection capabilities for React RCE (CVE-2025-55182). Key Findings React payloads commonly have a default maximum size of 1 MB. Cloudflare WAF previously inspected up to 128 KB on Enterprise plans, with even lower limits on other plans.
Hyperdrive - Connect to remote databases during local development with wrangler dev
You can now connect directly to remote databases and databases requiring TLS with wrangler dev . This lets you run your Worker code locally while connecting to remote databases, without needing to use wrangler dev --remote .
Workers - One-click Access protection for Workers now creates reusable Cloudflare Access policies
Workers applications now use reusable Cloudflare Access policies to reduce duplication and simplify access management across multiple Workers. Previously, enabling Cloudflare Access on a Worker created per-application policies, unique to each application.
Email security - Reclassifications to Submissions
We have updated the terminology “Reclassify” and “Reclassifications” to “Submit” and “Submissions” respectively. This update more accurately reflects the outcome of providing these items to Cloudflare. Submissions are leveraged to tune future variants of campaigns.
WAF Release - 2025-12-03 - Emergency
The WAF rule deployed yesterday to block unsafe deserialization-based RCE has been updated. The rule description now reads “React – RCE – CVE-2025-55182”, explicitly mapping to the recently disclosed React Server Components vulnerability. Detection logic remains unchanged.
Workers - Python cold start improvements
Python Workers now feature improved cold start performance, reducing initialization time for new Worker instances. This improvement is particularly noticeable for Workers with larger dependency sets or complex initialization logic. Every time you deploy a Python Worker, a memory snapshot is captured after the top level of the Worker is executed.
Workers - Easy Python package management with Pywrangler
We are introducing a brand new tool called Pywrangler, which simplifies package management in Python Workers by automatically installing Workers-compatible Python packages into your project.