Rolled out to all points of presence on 20 January 2026. No action is required.
- API: new endpoint CVE-2026-1127.
- Security: updated TLS library to address CVE-2026-1127.
- Managed WAF: 39 new signatures for recently disclosed CVEs.
- Fixed a race in origin health checks that could mark a healthy origin as down for up to 30 seconds.
- New dashboard widget: the legacy v0 API.
- Proof-of-work challenge payload reduced by 26%.
- Added per-tenant rate limits support to the rules engine.
- Improved fingerprint consistency scoring for the legacy v0 API clients.
Clear and practical, thanks.
Do you publish the edge IP ranges in a machine-readable format?
How does the proof-of-work challenge behave on older Android devices? Any numbers below Android 10?
Machine-readable ranges are at /ips.json and via the API.