1. Home
2. Reference documentation
3. Changelog
4. Next-Gen WAF

This changelog provides information on changes across the Fastly platform, including to the VCL language, our public API, CLI, Terraform provider, Compute Rust SDK, Compute JavaScript SDK, Compute Go SDK and Next-Gen WAF.

• November 6, 2023
  Next-Gen WAF rulesChanges

  Updated DATACENTER signal

• October 27, 2023
  Next-Gen WAF announcementsAdditions

  Protection from CVE-2023-38218 (insecure direct object reference)

• October 19, 2023
  Next-Gen WAF rulesAdditions

  Added virtual patch for CVE-2023-38218

• October 12, 2023
  Next-Gen WAF rulesChanges

  Updated CMDEXE signal

• October 11, 2023
  Next-Gen WAF rulesAdditions

  Added OOB-DOMAIN signal

• September 27, 2023
  Next-Gen WAF announcementsAdditions

  New rule condition operators available

• September 14, 2023
  Next-Gen WAF rulesChanges

  Improved detection of signals

• September 13, 2023
  Next-Gen WAF rulesAdditions

  Added CHALLENGE-INVALID, CHALLENGE-TOKEN-INVALID, and VERIFIED-BOT signals

• September 12, 2023
  Next-Gen WAF announcementsChanges

  Attack signal thresholds are now aggregated

• August 24, 2023
  Next-Gen WAF announcementsAdditions

  Protection from CVE-2023-34362 (MOVEit Transfer Critical SQL Injection Vulnerability)