Releasesby GlyphWAF - WAF Release - 2026-01-26
This week’s release introduces new detections for denial-of-service attempts targeting React CVE-2026-23864 ( https://www.cve.org/CVERecord?id=CVE-2026-23864 ↗ ). Key Findings CVE-2026-23864 ( https://www.cve.org/CVERecord?id=CVE-2026-23864 ↗ ) affects react-server-dom-parcel , react-server-dom-turbopack , and react-server-dom-webpack packages.
Also shipped Jan 26, 2026Cloudflare in January 2026 →
Security Update: DoS vulnerability in Next.js and React Server Components
A denial-of-service (DoS) vulnerability (CVE-2026-23864, CVSS 7.5) has been disclosed affecting React Server Components (RSCs), a feature used by Next.js and other React metaframeworks. A malicious payload can cause memory exhaustion or excessive CPU consumption.
DuckDB 1.4.4 Bugfix Release
This is a bug fix release for various issues discovered after we released 1.4.3. Please excuse the erroneous release earlier. Cast Fix: Correctly handle negative exponent with a number with a decimal in VARCHAR -> INTEGER cast [Storage] Fix NULL filter check for constant segments fixing staged upload for install.duckdb.org - hopefully Remove undefined loop...
Tailscale v1.94.1
Note : 1.94.0 was a release candidate intended for testing only. All Platforms New: tailscaled_home_derp_region_id client metrics are available. New: tailscaled_peer_relay_forwarded_packets_total and tailscaled_peer_relay_forwarded_bytes_total client metrics are available for Tailscale Peer Relays .
FigJam diagramming in Claude
Prompt to turn conversations, documents, and images into visual diagrams to break down complexity and visualize the bigger picture.
Compiler cache for builds and Workflows
Control build caching behavior on EAS with environment variables to speed up subsequent builds by up to 30%.
Webhooks Ingester
A self-hosted solution to store all your Resend webhook events in your own database.
More from Cloudflare developer platformEvery Cloudflare developer platform release →
Cloudflare One Client - WARP client for Windows (version 2026.1.89.1)
A new Beta release for the Windows WARP client is now available on the beta releases downloads page . This release contains minor fixes, improvements, and new features. Changes and improvements Improvements to multi-user mode .
Cloudflare One Client - WARP client for macOS (version 2026.1.89.1)
A new Beta release for the macOS WARP client is now available on the beta releases downloads page . This release contains minor fixes and improvements. Changes and improvements Fixed an issue causing failure of the local network exclusion feature when configured with a timeout of 0 .
Cloudflare One, Cloudflare WAN - Configure Cloudflare source IPs (beta)
Cloudflare source IPs are the IP addresses used by Cloudflare services (such as Load Balancing, Gateway, and Browser Isolation) when sending traffic to your private networks. For customers using legacy mode routing, traffic to private networks is sourced from public Cloudflare IPs, which may cause IP conflicts.
Cloudflare Fundamentals - Added Timezone preferences settings
You can now set the timezone in the Cloudflare dashboard as Coordinated Universal Time (UTC) or your browser or system's timezone. What's New Unless otherwise specified in the user interface, all dates and times in the Cloudflare dashboard are now displayed in the selected timezone. You can change the timezone setting from the user profile dropdown.
Rules - Control request and response body buffering in Configuration Rules
You can now control how Cloudflare buffers HTTP request and response bodies using two new settings in Configuration Rules . Request body buffering Controls how Cloudflare buffers HTTP request bodies before forwarding them to your origin server: Mode Behavior Standard (default) Cloudflare can inspect a prefix of the request body for enabled functionality...
Workers AI - Launching FLUX.2 [klein] 9B on Workers AI
We have partnered with Black Forest Labs (BFL) again to bring their optimized FLUX.2 [klein] 9B model to Workers AI. This distilled model offers enhanced quality compared to the 4B variant, while maintaining cost-effective pricing.
Cloudflare Fundamentals - New 2FA Experience for Login
In an effort to improve overall user security, users without 2FA will be prompted upon login to enroll in email 2FA. This will improve user security posture while minimizing friction. Users without email 2FA enabled will see a prompt to secure their account with additional factors upon logging in.
Pages - Increased Pages file limit to 100,000 for paid plans
Paid plans can now have up to 100,000 files per Pages site, increased from the previous limit of 20,000 files. To enable this increased limit, set the environment variable PAGES_WRANGLER_MAJOR_VERSION=4 in your Pages project settings. The Free plan remains at 20,000 files per site. For more details, refer to the Pages limits documentation .