cloudflare · kodster28 · Jul 24, 2025 · Jul 22, 2025 · Jul 22, 2025 · Jul 22, 2025
@@ -35,6 +35,7 @@
 /network-interconnect/changelog/index.xml /changelog/rss/network-interconnect.xml 301
 /rules/changelog/index.xml /changelog/rss/rules.xml 301
 /ssl/changelog/index.xml /changelog/rss/ssl.xml 301
+/waf/change-log/index.xml /changelog/rss/waf.xml 301
 
 ## legacy
 /release-notes/index.xml /changelog/rss/index.xml 301
@@ -1549,6 +1550,32 @@
 /support/firewall/tools/ /waf/ 301
 /support/firewall/tools/configuring-cloudflare-rate-limiting/ /waf/reference/legacy/old-rate-limiting/ 301
 /support/firewall/tools/troubleshooting-cloudflare-rate-limiting/ /waf/reference/legacy/old-rate-limiting/troubleshooting/ 301
+/waf/change-log/2025-01-06/ /changelog/2025-01-06-waf-release/ 301
+/waf/change-log/2025-01-13/ /changelog/2025-01-13-waf-release/ 301
+/waf/change-log/2025-01-21/ /changelog/2025-01-21-waf-release/ 301
+/waf/change-log/2025-02-11/ /changelog/2025-02-11-waf-release/ 301
+/waf/change-log/2025-02-18/ /changelog/2025-02-18-waf-release/ 301
+/waf/change-log/2025-02-24/ /changelog/2025-02-24-waf-release/ 301
+/waf/change-log/2025-03-03/ /changelog/2025-03-03-waf-release/ 301
+/waf/change-log/2025-03-10/ /changelog/2025-03-10-waf-release/ 301
+/waf/change-log/2025-03-11-emergency/ /changelog/2025-03-11-emergency-waf-release/ 301
+/waf/change-log/2025-03-17/ /changelog/2025-03-17-waf-release/ 301
+/waf/change-log/2025-03-19-emergency/ /changelog/2025-03-19-emergency-waf-release/ 301
+/waf/change-log/2025-03-22-emergency/ /changelog/2025-03-22-emergency-waf-release/ 301
+/waf/change-log/2025-04-02/ /changelog/2025-04-02-waf-release/ 301
+/waf/change-log/2025-04-14/ /changelog/2025-04-14-waf-release/ 301
+/waf/change-log/2025-04-22/ /changelog/2025-04-22-waf-release/ 301
+/waf/change-log/2025-04-26-emergency/ /changelog/2025-04-26-emergency-waf-release/ 301
+/waf/change-log/2025-05-05/ /changelog/2025-05-05-waf-release/ 301
+/waf/change-log/2025-05-19/ /changelog/2025-05-19-waf-release/ 301
+/waf/change-log/2025-05-27/ /changelog/2025-05-27-waf-release/ 301
+/waf/change-log/2025-06-02/ /changelog/2025-06-02-waf-release/ 301
+/waf/change-log/2025-06-09/ /changelog/2025-06-09-waf-release/ 301
+/waf/change-log/2025-06-16/ /changelog/2025-06-16-waf-release/ 301
+/waf/change-log/2025-07-07/ /changelog/2025-07-07-waf-release/ 301
+/waf/change-log/2025-07-14/ /changelog/2025-07-14-waf-release/ 301
+/waf/change-log/2025-07-21/ /changelog/2025-07-21-waf-release/ 301
+/waf/change-log/2025-07-21-emergency/ /changelog/2025-07-21-emergency/ 301
 /waf/change-log/historical/ /waf/change-log/historical-2019/ 301
 /waf/custom-rules/manage-dashboard/ /waf/custom-rules/create-dashboard/ 301
 /waf/security-analytics/ /waf/analytics/security-analytics/ 301

@@ -64,11 +64,10 @@ const productsByGroup = Object.entries(
 				</ul>
 			</Details>
 			{group === "Application security" && (
-				<Aside type="note" title="DDoS and WAF ruleset feeds">
+				<Aside type="note" title="DDoS ruleset feeds">
 					<p>
-						For <a href="/ddos-protection/">DDoS Protection</a> or{" "}
-						<a href="/waf/">WAF</a> updates to managed rulesets, please refer to
-						their independent feeds:
+						For <a href="/ddos-protection/">DDoS Protection</a> updates to
+						managed rulesets, please refer to their independent feeds:
 						<ul>
 							<li>
 								<p>
@@ -86,12 +85,6 @@ const productsByGroup = Object.entries(
 								</p>
 								<RSSButton href="/ddos-protection/change-log/http/index.xml" />
 							</li>
-							<li>
-								<p>
-									<a href="/waf/change-log/">WAF managed ruleset</a>
-								</p>
-								<RSSButton href="/waf/change-log/index.xml" />
-							</li>
 						</ul>
 					</p>
 				</Aside>

@@ -22,6 +22,7 @@ const props = z
 	.and(
 		z.object({
 			hideEntry: z.string().optional(),
+			scheduledOnly: z.boolean().default(false),
 		}),
 	);
 
@@ -37,7 +38,8 @@ if ("product" in input) {
 		return (
 			!e.data.hidden &&
 			e.data.products.some(({ id }) => id === input.product.id) &&
-			input.hideEntry !== e.id
+			input.hideEntry !== e.id &&
+			(!input.scheduledOnly || e.data.scheduled)
 		);
 	};
 } else {

@@ -0,0 +1,7 @@
+---
+title: Improved detection capabilities
+description: WAF attack score now detects Base64 and Unicode escapes.
+date: 2024-05-23
+---
+
+[WAF attack score](/waf/detections/attack-score/) now automatically detects and decodes Base64 and JavaScript (Unicode escape sequences) in HTTP requests. This update is available for all customers with access to WAF attack score (Business customers with access to a single field and Enterprise customers).
@@ -0,0 +1,7 @@
+---
+title: Fixed occasional attack score mismatches
+description: Fixed mismatches between WAF attack score and subscores.
+date: 2024-08-29
+---
+
+Fixed an issue causing score mismatches between the global [WAF attack score](/waf/detections/attack-score/) and subscores. In certain cases, subscores were higher (not an attack) than expected while the global attack score was lower than expected (attack), leading to false positives.
@@ -0,0 +1,7 @@
+---
+title: New table in Security Analytics and Security Events
+description: New responsive table in Security Analytics and Events.
+date: 2024-11-04
+---
+
+Switched to a new, more responsive table in Security Analytics and Security Events.
@@ -0,0 +1,7 @@
+---
+title: Security Events pagination
+description: Fixed pagination and log count issues in Security Events.
+date: 2024-11-14
+---
+
+Fixed an issue with pagination in Security Events' sampled logs where some pages were missing data. Also removed the total count from the events log as these are only sampled logs.
@@ -0,0 +1,7 @@
+---
+title: Change the order of list items in IP Lists (for API and Terraform users)
+description: API and Terraform users may see changes in IP list item order.
+date: 2024-12-10
+---
+
+Due to changes in the API implementation, the order of list items in an IP list obtained via API or Terraform may change, which may cause Terraform to detect a change in Terraform state. To fix this issue, resync the Terraform state or upgrade the version of your Terraform Cloudflare provider to [version 4.44.0](https://github.com/cloudflare/terraform-provider-cloudflare/releases/tag/v4.44.0) or later.
@@ -0,0 +1,7 @@
+---
+title: Improved VPN Managed List
+description: Improved management of VPN IP traffic.
+date: 2024-12-18
+---
+
+Customers can now effectively manage incoming traffic identified as originating from VPN IPs. Customers with compliance restrictions can now ensure compliance with local laws and regulations. Customers with CDN restrictions can use the improved VPN Managed List to prevent unauthorized access from users attempting to bypass geographical restrictions. With the new VPN Managed List enhancements, customers can improve their overall security posture to reduce exposure to unwanted or malicious traffic.
@@ -1,10 +1,7 @@
 ---
-title: "2025-01-06"
-type: table
-pcx_content_type: release-notes
-sidebar:
-  order: 806
-tableOfContents: false
+title: "WAF Release - 2025-01-06"
+description: Cloudflare WAF managed rulesets 2025-01-06 release
+date: 2025-01-06
 ---
 
 import { RuleID } from "~/components";

@@ -1,10 +1,7 @@
 ---
-title: "2025-01-13"
-type: table
-pcx_content_type: release-notes
-sidebar:
-  order: 805
-tableOfContents: false
+title: "WAF Release - 2025-01-13"
+description: Cloudflare WAF managed rulesets 2025-01-13 release
+date: 2025-01-13
 ---
 
 import { RuleID } from "~/components";

@@ -1,10 +1,7 @@
 ---
-title: "2025-01-21"
-type: table
-pcx_content_type: release-notes
-sidebar:
-  order: 804
-tableOfContents: false
+title: "WAF Release - 2025-01-21"
+description: Cloudflare WAF managed rulesets 2025-01-21 release
+date: 2025-01-21
 ---
 
 import { RuleID } from "~/components";

@@ -0,0 +1,7 @@
+---
+title: Updated leaked credentials database
+description: New records added to the leaked credentials database.
+date: 2025-02-04
+---
+
+Added new records to the leaked credentials database from a third-party database.
@@ -1,10 +1,7 @@
 ---
-title: "2025-02-11"
-type: table
-pcx_content_type: release-notes
-sidebar:
-  order: 803
-tableOfContents: false
+title: "WAF Release - 2025-02-11"
+description: Cloudflare WAF managed rulesets 2025-02-11 release
+date: 2025-02-11
 ---
 
 import { RuleID } from "~/components";

@@ -1,10 +1,7 @@
 ---
-title: "2025-02-18"
-type: table
-pcx_content_type: release-notes
-sidebar:
-  order: 802
-tableOfContents: false
+title: "WAF Release - 2025-02-18"
+description: Cloudflare WAF managed rulesets 2025-02-18 release
+date: 2025-02-18
 ---
 
 import { RuleID } from "~/components";

@@ -1,10 +1,7 @@
 ---
-title: "2025-02-24"
-type: table
-pcx_content_type: release-notes
-sidebar:
-  order: 801
-tableOfContents: false
+title: "WAF Release - 2025-02-24"
+description: Cloudflare WAF managed rulesets 2025-02-24 release
+date: 2025-02-24
 ---
 
 import { RuleID } from "~/components";

@@ -1,10 +1,7 @@
 ---
-title: "2025-03-03"
-type: table
-pcx_content_type: release-notes
-sidebar:
-  order: 800
-tableOfContents: false
+title: "WAF Release - 2025-03-03"
+description: Cloudflare WAF managed rulesets 2025-03-03 release
+date: 2025-03-03
 ---
 
 import { RuleID } from "~/components";
@@ -28,7 +25,10 @@ import { RuleID } from "~/components";
 				<RuleID id="90356ececae3444b9accb3d393e63099" />
 			</td>
 			<td>100721</td>
-			<td>Ivanti - Remote Code Execution - CVE:CVE-2024-13159, CVE:CVE-2024-13160, CVE:CVE-2024-13161</td>
+			<td>
+				Ivanti - Remote Code Execution - CVE:CVE-2024-13159, CVE:CVE-2024-13160,
+				CVE:CVE-2024-13161
+			</td>
 			<td>Log</td>
 			<td>Block</td>
 			<td>This is a New Detection</td>
@@ -39,7 +39,10 @@ import { RuleID } from "~/components";
 				<RuleID id="6cf09ce2fa73482abb7f677ecac42ce2" />
 			</td>
 			<td>100596</td>
-			<td>Citrix Content Collaboration ShareFile - Remote Code Execution - CVE:CVE-2023-24489</td>
+			<td>
+				Citrix Content Collaboration ShareFile - Remote Code Execution -
+				CVE:CVE-2023-24489
+			</td>
 			<td>N/A</td>
 			<td>Block</td>
 			<td></td>

@@ -0,0 +1,7 @@
+---
+title: Updated leaked credentials database
+description: New records added to the leaked credentials database.
+date: 2025-03-07
+---
+
+Added new records to the leaked credentials database. The record sources are: Have I Been Pwned (HIBP) database, RockYou 2024 dataset, and another third-party database.
@@ -1,10 +1,7 @@
 ---
-title: "2025-03-10"
-type: table
-pcx_content_type: release-notes
-sidebar:
-  order: 799
-tableOfContents: false
+title: "WAF Release - 2025-03-10"
+description: Cloudflare WAF managed rulesets 2025-03-10 release
+date: 2025-03-10
 ---
 
 import { RuleID } from "~/components";

@@ -1,10 +1,7 @@
 ---
-title: "2025-03-11 - Emergency"
-type: table
-pcx_content_type: release-notes
-sidebar:
-  order: 798
-tableOfContents: false
+title: "WAF Release - 2025-03-11 - Emergency"
+description: Cloudflare WAF managed rulesets 2025-03-11 emergency release
+date: 2025-03-11
 ---
 
 import { RuleID } from "~/components";

@@ -1,10 +1,7 @@
 ---
-title: "2025-03-17"
-type: table
-pcx_content_type: release-notes
-sidebar:
-  order: 797
-tableOfContents: false
+title: "WAF Release - 2025-03-17"
+description: Cloudflare WAF managed rulesets 2025-03-17 release
+date: 2025-03-17
 ---
 
 import { RuleID } from "~/components";
@@ -28,7 +25,10 @@ import { RuleID } from "~/components";
 				<RuleID id="28b2a12993a04e62a98abcd9e59ec18a" />
 			</td>
 			<td>100725</td>
-			<td>Fortinet FortiManager - Remote Code Execution - CVE:CVE-2023-42791, CVE:CVE-2024-23666</td>
+			<td>
+				Fortinet FortiManager - Remote Code Execution - CVE:CVE-2023-42791,
+				CVE:CVE-2024-23666
+			</td>
 			<td>Log</td>
 			<td>Block</td>
 			<td></td>
@@ -83,7 +83,9 @@ import { RuleID } from "~/components";
 				<RuleID id="35fe23e7bd324d00816c82d098d47b69" />
 			</td>
 			<td>100730</td>
-			<td>Pentaho - Template Injection - CVE:CVE-2022-43769, CVE:CVE-2022-43939</td>
+			<td>
+				Pentaho - Template Injection - CVE:CVE-2022-43769, CVE:CVE-2022-43939
+			</td>
 			<td>Log</td>
 			<td>Block</td>
 			<td></td>

@@ -1,10 +1,7 @@
 ---
-title: "2025-03-19 - Emergency"
-type: table
-pcx_content_type: release-notes
-sidebar:
-  order: 796
-tableOfContents: false
+title: "WAF Release - 2025-03-19 - Emergency"
+description: Cloudflare WAF managed rulesets 2025-03-19 release
+date: 2025-03-19
 ---
 
 import { RuleID } from "~/components";

@@ -1,10 +1,7 @@
 ---
-title: "2025-03-22 - Emergency"
-type: table
-pcx_content_type: release-notes
-sidebar:
-  order: 795
-tableOfContents: false
+title: "WAF Release - 2025-03-22 - Emergency"
+description: Cloudflare WAF managed rulesets 2025-03-22 release
+date: 2025-03-22
 ---
 
 import { RuleID } from "~/components";