Releasesby GlyphWAF - WAF Release - 2026-06-09
This release introduces new detections for a critical SQL injection vulnerability in Drupal installations utilizing PostgreSQL (CVE-2026-9082), alongside targeted protection for an unsafe deserialization flaw in the Mirasvit Cache Warmer extension (CVE-2026-45247).
Also shipped Jun 9, 2026Cloudflare in June 2026 →
Package Firewall: Blocking 8,000+ malicious packages daily
Replit has introduced Package Firewall, a security feature that blocks malicious and compromised dependencies from being installed in projects.
Gremlin: turning open tasks into pull requests
Gremlin is an autonomous agent that uses Mastra and OpenCode to convert Sentry issues, Linear tasks, and Slack instructions into pull requests.
Modal 1.5.0
This is a major release that includes several new features (named Images, version-pinned Function lookups, Sandbox domain allowlists), a new modal skills CLI, and a small number of breaking changes. We're introducing a "named Image" concept, akin to a Modal-native Image registry.
FLUX Outpainting , New Fast Mode
FLUX Outpainting now supports a mode parameter that trades quality for speed.
Key Features
- mode: "fast" , Significantly faster extension, well-suited for landscapes, backgrounds, textures, and products. Typically lower cost. mode: "high" (default) , Unchanged highest-fidelity path; recommended when fine detail, prompt adherence, or consistency with complex source content matters.
More from Cloudflare developer platformEvery Cloudflare developer platform release →
Sandbox SDK - Deprecating Sandbox SDK features
Sandbox SDK 1.0 preview A preview of Sandbox SDK 1.0 is available on @cloudflare/sandbox@next . For new projects, or to move past these deprecations in one migration, refer to the Sandbox SDK 1.0 preview and Migrate . Today we are announcing the deprecation of several features from the Sandbox SDK.
AI Search - Manage AI Search namespaces with Wrangler CLI
AI Search now supports namespace-level Wrangler commands, making it easier to manage namespaces from your terminal, scripts, and agent workflows. The following commands are available: Command Description wrangler ai-search namespace list List AI Search namespaces wrangler ai-search namespace create Create a new AI Search namespace wrangler ai-search...
DNS - Account-level DNS records quota
Cloudflare now enforces DNS records quotas at the account level for Enterprise accounts. Instead of a per-zone limit, these accounts have a quota on the total number of records across all of their zones, letting you distribute records across your zones however you like , regardless of each zone's plan.
Flagship API reference now available
The Flagship API reference is now available. You can use the Cloudflare API to create and update apps, and to create, update, delete, and list feature flags without using the dashboard.
Cloudflare Images - Manage hosted images with the Images binding
Use the Images binding to upload, list, retrieve, update, and delete images stored in Images directly from your Worker without managing API tokens or making HTTP requests. The env.IMAGES.hosted namespace supports the following storage and management operations: .upload(image, options) , Upload a new image to your account.
Security Center - Automated Cease and Desist templates for Brand Protection
TL;DR: Brand Protection now features an Automated Cease & Desist (C&D) workflow. When you discover an infringing domain hosted outside of Cloudflare, you can instantly generate, review, and download a custom-branded, pre-filled legal notice in seconds.
Email Service - Authenticated SMTP submission now available in beta
You can now send emails through Cloudflare Email Service using authenticated SMTP submission on smtp.mx.cloudflare.net:465 . SMTP joins the REST API and the Workers binding as a third way to send transactional email , useful for existing applications that already speak SMTP and language-native SMTP libraries (Nodemailer, smtplib , PHPMailer, JavaMail).
R2 SQL now supports UNION, INTERSECT, EXCEPT, and SELECT DISTINCT
R2 SQL now supports set operations ( UNION , INTERSECT , EXCEPT ) and SELECT DISTINCT , expanding the range of analytical queries you can run directly on Apache Iceberg ↗ tables in R2 Data Catalog .