External dependencies

Below we enumerate the external dependencies that may be linked into the Envoy binary. We exclude dependencies that only are used in CI or developer tooling above.

Data plane (core)

External dependencies: dataplane_core

Name	Version	Release date	CPE
Abseil	4bbdb02	2022-07-05
BoringSSL	62079f7	2022-05-10	cpe:2.3:a:google:boringssl:*
BoringSSL (FIPS)	fips-20190808	2019-08-08	cpe:2.3:a:google:boringssl:*
c-ares	1.18.1	2021-10-27	cpe:2.3:a:c-ares_project:c-ares:*
fmt	8.1.1	2022-01-06	cpe:2.3:a:fmt:fmt:*
gperftools	2.9.1	2021-03-03	cpe:2.3:a:gperftools_project:gperftools:*
gRPC	a3ae8e0	2021-06-07	cpe:2.3:a:grpc:grpc:*
libcircllhist	63a16dd	2019-02-11
libevent	62c152d	2020-07-28	cpe:2.3:a:libevent_project:libevent:*
liburing	2.1	2021-09-09
Nghttp2	1.47.0	2022-02-23	cpe:2.3:a:nghttp2:nghttp2:*
nlohmann JSON	3.10.5	2022-01-03	cpe:2.3:a:json-for-modern-cpp_project:json-for-modern-cpp:*
Perfetto	22.1	2021-12-07
Protocol Buffers	3.19.4	2022-01-28	cpe:2.3:a:google:protobuf:*
Protocol Buffers (protoc) linux_aarch_64	3.19.4	2022-01-28
Protocol Buffers (protoc) linux_x86_64	3.19.4	2022-01-28
Protocol Buffers (protoc) osx_x86_64	3.19.4	2022-01-28
Protocol Buffers (protoc) win64	3.19.4	2022-01-28
QUICHE	8eb90ef	2022-07-13
RE2	2022-04-01	2022-03-31
Rules for using foreign build systems in Bazel	0.8.0	2022-04-18
spdlog	1.9.2	2021-08-12
tcmalloc	a08f548	2022-04-07
xxHash	0.8.1	2021-11-29
yaml-cpp	420c982	2022-04-27	cpe:2.3:a:yaml-cpp_project:yaml-cpp:*
zlib	1.2.12	2022-03-27	cpe:2.3:a:gnu:zlib:*
zlib-ng	2.0.6	2021-12-24

Data plane (extensions)

External dependencies: dataplane_ext

envoy.access_loggers.extension_filters.cel

Name	Version	Release date	CPE
Common Expression Language (CEL) C++ library	1adb613	2022-06-02
FlatBuffers	2.0.0	2021-05-10	cpe:2.3:a:google:flatbuffers:*

envoy.access_loggers.wasm

Name	Version	Release date	CPE
Common Expression Language (CEL) C++ library	1adb613	2022-06-02
FlatBuffers	2.0.0	2021-05-10	cpe:2.3:a:google:flatbuffers:*
WebAssembly for Proxies (C++ host implementation)	624ef2e	2022-11-22
WebAssembly for Proxies (C++ SDK)	e30535b	2022-03-15

envoy.bootstrap.wasm

Name	Version	Release date	CPE
Common Expression Language (CEL) C++ library	1adb613	2022-06-02
FlatBuffers	2.0.0	2021-05-10	cpe:2.3:a:google:flatbuffers:*
WebAssembly for Proxies (C++ host implementation)	624ef2e	2022-11-22
WebAssembly for Proxies (C++ SDK)	e30535b	2022-03-15

envoy.compression.brotli.compressor

Name	Version	Release date	CPE
brotli	0cd2e39	2020-09-08	cpe:2.3:a:google:brotli:*

envoy.compression.brotli.decompressor

Name	Version	Release date	CPE
brotli	0cd2e39	2020-09-08	cpe:2.3:a:google:brotli:*

envoy.compression.zstd.compressor

Name	Version	Release date	CPE
zstd	1.5.2	2022-01-20	cpe:2.3:a:facebook:zstandard:*

envoy.compression.zstd.decompressor

Name	Version	Release date	CPE
zstd	1.5.2	2022-01-20	cpe:2.3:a:facebook:zstandard:*

envoy.filters.http.aws_lambda

Name	Version	Release date	CPE
curl	7.86.0	2022-10-26	cpe:2.3:a:haxx:libcurl:*

envoy.filters.http.aws_request_signing

Name	Version	Release date	CPE
curl	7.86.0	2022-10-26	cpe:2.3:a:haxx:libcurl:*

envoy.filters.http.gcp_authn

Name	Version	Release date	CPE
jwt_verify_lib	e5d6cf7	2021-03-05

envoy.filters.http.grpc_json_transcoder

Name	Version	Release date	CPE
grpc-httpjson-transcoding	8dcb517	2022-06-18

envoy.filters.http.jwt_authn

Name	Version	Release date	CPE
jwt_verify_lib	e5d6cf7	2021-03-05

envoy.filters.http.language

Name	Version	Release date	CPE
ICU Library	71-1	2022-04-06

envoy.filters.http.lua

Name	Version	Release date	CPE
LuaJIT	1d8b747	2020-10-12	cpe:2.3:a:luajit:luajit:*
Moonjit	2.2.0	2020-01-14	cpe:2.3:a:moonjit_project:moonjit:*

envoy.filters.http.rbac

Name	Version	Release date	CPE
Common Expression Language (CEL) C++ library	1adb613	2022-06-02
FlatBuffers	2.0.0	2021-05-10	cpe:2.3:a:google:flatbuffers:*

envoy.filters.http.wasm

Name	Version	Release date	CPE
Common Expression Language (CEL) C++ library	1adb613	2022-06-02
FlatBuffers	2.0.0	2021-05-10	cpe:2.3:a:google:flatbuffers:*
WebAssembly for Proxies (C++ host implementation)	624ef2e	2022-11-22
WebAssembly for Proxies (C++ SDK)	e30535b	2022-03-15

envoy.filters.network.dubbo_proxy

Name	Version	Release date	CPE
hessian2-codec	dd8e054	2021-04-05

envoy.filters.network.kafka_broker

Name	Version	Release date	CPE
Kafka (source)	3.3.1	2022-09-29	cpe:2.3:a:apache:kafka:*

envoy.filters.network.kafka_mesh

Name	Version	Release date	CPE
Kafka (C/C++ client)	1.8.2	2021-10-18
Kafka (source)	3.3.1	2022-09-29	cpe:2.3:a:apache:kafka:*

envoy.filters.network.mysql_proxy

Name	Version	Release date	CPE
C++ SQL Parser Library	3b40ba2	2020-06-10

envoy.filters.network.postgres_proxy

Name	Version	Release date	CPE
C++ SQL Parser Library	3b40ba2	2020-06-10

envoy.filters.network.rbac

Name	Version	Release date	CPE
Common Expression Language (CEL) C++ library	1adb613	2022-06-02
FlatBuffers	2.0.0	2021-05-10	cpe:2.3:a:google:flatbuffers:*

envoy.filters.network.wasm

Name	Version	Release date	CPE
Common Expression Language (CEL) C++ library	1adb613	2022-06-02
FlatBuffers	2.0.0	2021-05-10	cpe:2.3:a:google:flatbuffers:*
WebAssembly for Proxies (C++ host implementation)	624ef2e	2022-11-22
WebAssembly for Proxies (C++ SDK)	e30535b	2022-03-15

envoy.grpc_credentials.aws_iam

Name	Version	Release date	CPE
curl	7.86.0	2022-10-26	cpe:2.3:a:haxx:libcurl:*

envoy.matching.input_matchers.hyperscan

Name	Version	Release date	CPE
Boost	1.78.0	2021-12-08	cpe:2.3:a:boost:boost:*
Colm	2d8ba76	2021-12-28
Hyperscan	5.4.0	2021-01-13
Ragel	d4577c9	2021-12-28

envoy.network.connection_balance.dlb

Name	Version	Release date	CPE
Intel Dlb	7.6.0	2022-03-30

envoy.rate_limit_descriptors.expr

Name	Version	Release date	CPE
Common Expression Language (CEL) C++ library	1adb613	2022-06-02
FlatBuffers	2.0.0	2021-05-10	cpe:2.3:a:google:flatbuffers:*

envoy.rbac.matchers.upstream_ip_port

Name	Version	Release date	CPE
Common Expression Language (CEL) C++ library	1adb613	2022-06-02
FlatBuffers	2.0.0	2021-05-10	cpe:2.3:a:google:flatbuffers:*

envoy.regex_engines.hyperscan

Name	Version	Release date	CPE
Colm	2d8ba76	2021-12-28
Ragel	d4577c9	2021-12-28

envoy.stat_sinks.wasm

Name	Version	Release date	CPE
Common Expression Language (CEL) C++ library	1adb613	2022-06-02
FlatBuffers	2.0.0	2021-05-10	cpe:2.3:a:google:flatbuffers:*
WebAssembly for Proxies (C++ host implementation)	624ef2e	2022-11-22
WebAssembly for Proxies (C++ SDK)	e30535b	2022-03-15

envoy.tls.key_providers.cryptomb

Name	Version	Release date	CPE
libipp-crypto	2021.5	2021-12-21	cpe:2.3:a:intel:cryptography_for_intel_integrated_performance_primitives:*

envoy.tracers.opencensus

Name	Version	Release date	CPE
curl	7.86.0	2022-10-26	cpe:2.3:a:haxx:libcurl:*

envoy.wasm.runtime.null

Name	Version	Release date	CPE
WebAssembly for Proxies (C++ host implementation)	624ef2e	2022-11-22
WebAssembly for Proxies (C++ SDK)	e30535b	2022-03-15

envoy.wasm.runtime.v8

Name	Version	Release date	CPE
Chromium’s trace event headers	521ac34	2022-10-12
V8	10.7.193.13	2022-10-12	cpe:2.3:a:google:v8:*
WebAssembly for Proxies (C++ host implementation)	624ef2e	2022-11-22
WebAssembly for Proxies (C++ SDK)	e30535b	2022-03-15

envoy.wasm.runtime.wamr

Name	Version	Release date	CPE
LLVM	12.0.1	2021-07-09	cpe:2.3:a:llvm:*:*
WebAssembly for Proxies (C++ host implementation)	624ef2e	2022-11-22
WebAssembly for Proxies (C++ SDK)	e30535b	2022-03-15
Webassembly Micro Runtime	WAMR-05-18-2022	2022-05-18

envoy.wasm.runtime.wasmtime

Name	Version	Release date	CPE
Bazel rust rules	0.8.1	2022-07-26
wasm-c-api	c9d3128	2021-01-11
wasmtime	2.0.2	2022-11-10	cpe:2.3:a:bytecodealliance:wasmtime:*
WebAssembly for Proxies (C++ host implementation)	624ef2e	2022-11-22
WebAssembly for Proxies (C++ SDK)	e30535b	2022-03-15

envoy.wasm.runtime.wavm

Name	Version	Release date	CPE
LLVM	12.0.1	2021-07-09	cpe:2.3:a:llvm:*:*
WAVM	3f9a150	2022-05-14	cpe:2.3:a:webassembly_virtual_machine_project:webassembly_virtual_machine:*
WebAssembly for Proxies (C++ host implementation)	624ef2e	2022-11-22
WebAssembly for Proxies (C++ SDK)	e30535b	2022-03-15

Control plane

External dependencies: controlplane

Name	Version	Release date	CPE
Abseil	4bbdb02	2022-07-05
BoringSSL	62079f7	2022-05-10	cpe:2.3:a:google:boringssl:*
BoringSSL (FIPS)	fips-20190808	2019-08-08	cpe:2.3:a:google:boringssl:*
c-ares	1.18.1	2021-10-27	cpe:2.3:a:c-ares_project:c-ares:*
fmt	8.1.1	2022-01-06	cpe:2.3:a:fmt:fmt:*
gperftools	2.9.1	2021-03-03	cpe:2.3:a:gperftools_project:gperftools:*
gRPC	a3ae8e0	2021-06-07	cpe:2.3:a:grpc:grpc:*
libcircllhist	63a16dd	2019-02-11
libevent	62c152d	2020-07-28	cpe:2.3:a:libevent_project:libevent:*
liburing	2.1	2021-09-09
Nghttp2	1.47.0	2022-02-23	cpe:2.3:a:nghttp2:nghttp2:*
nlohmann JSON	3.10.5	2022-01-03	cpe:2.3:a:json-for-modern-cpp_project:json-for-modern-cpp:*
Perfetto	22.1	2021-12-07
Protocol Buffers	3.19.4	2022-01-28	cpe:2.3:a:google:protobuf:*
Protocol Buffers (protoc) linux_aarch_64	3.19.4	2022-01-28
Protocol Buffers (protoc) linux_x86_64	3.19.4	2022-01-28
Protocol Buffers (protoc) osx_x86_64	3.19.4	2022-01-28
Protocol Buffers (protoc) win64	3.19.4	2022-01-28
RE2	2022-04-01	2022-03-31
Rules for using foreign build systems in Bazel	0.8.0	2022-04-18
spdlog	1.9.2	2021-08-12
tcmalloc	a08f548	2022-04-07
upb	de76b31	2020-12-29
xxHash	0.8.1	2021-11-29
yaml-cpp	420c982	2022-04-27	cpe:2.3:a:yaml-cpp_project:yaml-cpp:*
zlib	1.2.12	2022-03-27	cpe:2.3:a:gnu:zlib:*
zlib-ng	2.0.6	2021-12-24

API

External dependencies: api

Name	Version	Release date	CPE
bazel-skylib	1.2.1	2022-03-10
buf	1.6.0	2022-06-21
Go rules for Bazel	0.33.0	2022-06-06
Google APIs	82944da	2019-12-02
OpenCensus Proto	0.3.0	2022-09-22
OpenTelemetry Proto	0.18.0	2022-05-17
Prometheus client model	147c58e	2021-06-07
Protobuf Rules for Bazel	4.0.0	2021-09-15
protoc-gen-validate (PGV)	0.6.7	2022-03-04
xDS API	1e77728	2022-05-20
Zipkin API	1.0.0	2020-11-22

Observability (core)

External dependencies: observability_core

Name	Version	Release date	CPE
libcircllhist	63a16dd	2019-02-11

Observability (extensions)

External dependencies: observability_ext

envoy.filters.http.aws_lambda

Name	Version	Release date	CPE
curl	7.86.0	2022-10-26	cpe:2.3:a:haxx:libcurl:*

envoy.filters.http.aws_request_signing

Name	Version	Release date	CPE
curl	7.86.0	2022-10-26	cpe:2.3:a:haxx:libcurl:*

envoy.grpc_credentials.aws_iam

Name	Version	Release date	CPE
curl	7.86.0	2022-10-26	cpe:2.3:a:haxx:libcurl:*

envoy.tracers.datadog

Name	Version	Release date	CPE
Datadog OpenTracing C++ Client	1.2.1	2021-01-27
msgpack for C/C++	3.3.0	2020-06-05
OpenTracing	1.5.1	2019-01-16

envoy.tracers.dynamic_ot

Name	Version	Release date	CPE
OpenTracing	1.5.1	2019-01-16

envoy.tracers.lightstep

Name	Version	Release date	CPE
lightstep-tracer-cpp	1942b3f	2020-08-25
OpenTracing	1.5.1	2019-01-16

envoy.tracers.opencensus

Name	Version	Release date	CPE
curl	7.86.0	2022-10-26	cpe:2.3:a:haxx:libcurl:*
OpenCensus C++	ba63106	2020-10-08
RapidJSON	dfbe1db	2019-12-03	cpe:2.3:a:tencent:rapidjson:*

envoy.tracers.skywalking

Name	Version	Release date	CPE
cpp2sky	0.4.0	2022-03-28
skywalking-data-collect-protocol	8.9.1	2021-12-11	cpe:2.3:a:apache:skywalking:*

envoy.tracers.zipkin

Name	Version	Release date	CPE
RapidJSON	dfbe1db	2019-12-03	cpe:2.3:a:tencent:rapidjson:*

Build

External dependencies: build

Name	Version	Release date	CPE
Apple Rules for Bazel	0.34.2	2022-05-02
Aspect Bazel helpers	1.7.0	2022-07-15
bazel-compilation-database	0.5.2	2021-09-10
bazel-toolchains	5.1.1	2021-11-30
envoy-build-tools	9cdf86f	2022-05-12
Gazelle	0.25.0	2022-03-23
Go rules for Bazel	0.33.0	2022-06-06
Packaging rules for Bazel	0.7.0	2022-04-07
Python rules for Bazel	0.9.0	2022-06-12
Rules for using foreign build systems in Bazel	0.8.0	2022-04-18
Shellcheck rules for bazel	0.1.1	2022-05-30

Miscellaneous

External dependencies: other

Name	Version	Release date	CPE
su-exec	212b751	2019-09-18
tclap	1.2.5	2021-11-01	cpe:2.3:a:tclap_project:tclap:*

envoy.bootstrap.vcl

Name	Version	Release date	CPE
VPP Comms Library	fe6d8a3	2022-03-02

envoy.filters.http.sxg

Name	Version	Release date	CPE
libsxg	beaa393	2021-07-08

Test only

Below we provide the status of the C/C++ dependencies that are only used in tests. Tests also include additional Java, Rust and Python dependencies that are not tracked below.

External dependencies: test_only

Name	Version	Release date	CPE
Benchmark	1.6.1	2022-01-10
compiler-rt	14.0.0	2022-03-23	cpe:2.3:a:llvm:compiler-rt:*
Emscripten SDK	0ea8f8a	2022-03-09
Fuzzing Rules for Bazel	0.3.1	2022-01-24
Google Test	a4ab0ab	2020-09-10	cpe:2.3:a:google:google_test:*
Kafka (Python client)	2.0.2	2020-09-30
Kafka (server binary)	3.3.1	2022-10-02
libprotobuf-mutator	1.0	2020-11-13
WebAssembly for Proxies (Rust SDK)	0.2.1	2022-11-22