This release introduces new detections to mitigate recent vulnerabilities affecting TanStack and Atlassian products. Key Findings CVE-2026-102989: A reflected Cross-Site Scripting (XSS) vulnerability affecting TanStack. Unauthenticated attackers can exploit this flaw to inject malicious scripts into web pages viewed by other users, potentially leading to session hijacking or unauthorized actions.
WAF - WAF Release - 2026-10-12
calendar_today
October 12, 2026
domain
cloudflare