External dependencies

Below we enumerate the external dependencies that may be linked into the Envoy binary. We exclude dependencies that only are used in CI or developer tooling above.

Data plane (core)

Name	Version	Release date	CPE
Abseil	5d8fc91	2020-11-24
BoringSSL	1ce6682	2020-09-21	cpe:2.3:a:google:boringssl:*
BoringSSL (FIPS)	fips-20190808	2019-08-08	cpe:2.3:a:google:boringssl:*
c-ares	1.17.2	2021-07-24	cpe:2.3:a:c-ares_project:c-ares:*
fmt	7.0.3	2020-08-06	cpe:2.3:a:fmt:fmt:*
gperftools	2.8	2020-07-06	cpe:2.3:a:gperftools_project:gperftools:*
gRPC	1.34.0	2020-12-01	cpe:2.3:a:grpc:grpc:*
HTTP Parser	4f15b7d	2020-07-10	cpe:2.3:a:nodejs:node.js:*
libcircllhist	63a16dd	2019-02-11
libevent	62c152d	2020-07-28	cpe:2.3:a:libevent_project:libevent:*
Nghttp2	1.41.0	2020-06-02	cpe:2.3:a:nghttp2:nghttp2:*
Protocol Buffers	3.14.0	2020-11-13	cpe:2.3:a:google:protobuf:*
RapidJSON	dfbe1db	2019-12-03	cpe:2.3:a:tencent:rapidjson:*
RE2	2020-07-06	2020-07-06
spdlog	1.7.0	2020-07-09
tcmalloc	9f38535	2020-11-04
xxHash	0.7.3	2020-03-05
yaml-cpp	98acc5a	2020-07-27	cpe:2.3:a:yaml-cpp_project:yaml-cpp:*
zlib	79baebe	2019-04-14	cpe:2.3:a:gnu:zlib:*
zlib-ng	b802a30	2020-10-18

Data plane (extensions)

envoy.access_loggers.wasm

Name	Version	Release date	CPE
ANTLR Rules for Bazel	3cc2f95	2019-06-21
ANTLR v4	4.7.2	2018-12-18
Common Expression Language (CEL) C++ library	9841e3e	2020-12-17
FlatBuffers	a83caf5	2020-04-02
WebAssembly for Proxies (C++ host implementation)	a59dd54	2021-02-11
WebAssembly for Proxies (C++ SDK)	956f0d5	2020-11-20

envoy.bootstrap.wasm

Name	Version	Release date	CPE
ANTLR Rules for Bazel	3cc2f95	2019-06-21
ANTLR v4	4.7.2	2018-12-18
Common Expression Language (CEL) C++ library	9841e3e	2020-12-17
FlatBuffers	a83caf5	2020-04-02
WebAssembly for Proxies (C++ host implementation)	a59dd54	2021-02-11
WebAssembly for Proxies (C++ SDK)	956f0d5	2020-11-20

envoy.filters.http.aws_lambda

Name	Version	Release date	CPE
curl	7.74.0	2020-12-09	cpe:2.3:a:haxx:curl:*

envoy.filters.http.aws_request_signing

Name	Version	Release date	CPE
curl	7.74.0	2020-12-09	cpe:2.3:a:haxx:curl:*

envoy.filters.http.grpc_json_transcoder

Name	Version	Release date	CPE
grpc-httpjson-transcoding	4d095f0	2020-11-13

envoy.filters.http.jwt_authn

Name	Version	Release date	CPE
jwt_verify_lib	28efec2	2020-11-05

envoy.filters.http.lua

Name	Version	Release date	CPE
LuaJIT	1d8b747	2020-10-12	cpe:2.3:a:luajit:luajit:*
Moonjit	2.2.0	2020-01-14	cpe:2.3:a:moonjit_project:moonjit:*

envoy.filters.http.rbac

Name	Version	Release date	CPE
Common Expression Language (CEL) C++ library	9841e3e	2020-12-17
FlatBuffers	a83caf5	2020-04-02

envoy.filters.http.wasm

Name	Version	Release date	CPE
ANTLR Rules for Bazel	3cc2f95	2019-06-21
ANTLR v4	4.7.2	2018-12-18
Common Expression Language (CEL) C++ library	9841e3e	2020-12-17
FlatBuffers	a83caf5	2020-04-02
WebAssembly for Proxies (C++ host implementation)	a59dd54	2021-02-11
WebAssembly for Proxies (C++ SDK)	956f0d5	2020-11-20

envoy.filters.network.kafka_broker

Name	Version	Release date	CPE
Kafka (source)	2.4.1	2020-03-03	cpe:2.3:a:apache:kafka:*

envoy.filters.network.mysql_proxy

Name	Version	Release date	CPE
C++ SQL Parser Library	3b40ba2	2020-06-10

envoy.filters.network.postgres_proxy

Name	Version	Release date	CPE
C++ SQL Parser Library	3b40ba2	2020-06-10

envoy.filters.network.rbac

Name	Version	Release date	CPE
Common Expression Language (CEL) C++ library	9841e3e	2020-12-17
FlatBuffers	a83caf5	2020-04-02

envoy.filters.network.wasm

Name	Version	Release date	CPE
ANTLR Rules for Bazel	3cc2f95	2019-06-21
ANTLR v4	4.7.2	2018-12-18
Common Expression Language (CEL) C++ library	9841e3e	2020-12-17
FlatBuffers	a83caf5	2020-04-02
WebAssembly for Proxies (C++ host implementation)	a59dd54	2021-02-11
WebAssembly for Proxies (C++ SDK)	956f0d5	2020-11-20

envoy.grpc_credentials.aws_iam

Name	Version	Release date	CPE
curl	7.74.0	2020-12-09	cpe:2.3:a:haxx:curl:*

envoy.rate_limit_descriptors.expr

Name	Version	Release date	CPE
ANTLR Rules for Bazel	3cc2f95	2019-06-21
ANTLR v4	4.7.2	2018-12-18
Common Expression Language (CEL) C++ library	9841e3e	2020-12-17
FlatBuffers	a83caf5	2020-04-02

envoy.stat_sinks.wasm

Name	Version	Release date	CPE
ANTLR Rules for Bazel	3cc2f95	2019-06-21
ANTLR v4	4.7.2	2018-12-18
Common Expression Language (CEL) C++ library	9841e3e	2020-12-17
FlatBuffers	a83caf5	2020-04-02
WebAssembly for Proxies (C++ host implementation)	a59dd54	2021-02-11
WebAssembly for Proxies (C++ SDK)	956f0d5	2020-11-20

envoy.tracers.opencensus

Name	Version	Release date	CPE
curl	7.74.0	2020-12-09	cpe:2.3:a:haxx:curl:*

envoy.transport_sockets.quic

Name	Version	Release date	CPE
QUICHE	ecc28c0	2020-11-10

envoy.wasm.runtime.null

Name	Version	Release date	CPE
WebAssembly for Proxies (C++ host implementation)	a59dd54	2021-02-11
WebAssembly for Proxies (C++ SDK)	956f0d5	2020-11-20

envoy.wasm.runtime.v8

Name	Version	Release date	CPE
V8	9.0.257.17	2021-04-12	cpe:2.3:a:google:v8:*
WebAssembly for Proxies (C++ host implementation)	a59dd54	2021-02-11
WebAssembly for Proxies (C++ SDK)	956f0d5	2020-11-20

envoy.wasm.runtime.wasmtime

Name	Version	Release date	CPE
Bazel rust rules	aa7c693	2020-12-04
wasm-c-api	d9a8009	2019-11-14
wasmtime	0.21.0	2020-11-05
WebAssembly for Proxies (C++ host implementation)	a59dd54	2021-02-11
WebAssembly for Proxies (C++ SDK)	956f0d5	2020-11-20

envoy.wasm.runtime.wavm

Name	Version	Release date	CPE
LLVM	10.0.0	2020-03-23	cpe:2.3:a:llvm:*:*
WAVM	e289ba6	2020-09-17	cpe:2.3:a:webassembly_virtual_machine_project:webassembly_virtual_machine:*
WebAssembly for Proxies (C++ host implementation)	a59dd54	2021-02-11
WebAssembly for Proxies (C++ SDK)	956f0d5	2020-11-20

Control plane

Name	Version	Release date	CPE
Abseil	5d8fc91	2020-11-24
BoringSSL	1ce6682	2020-09-21	cpe:2.3:a:google:boringssl:*
BoringSSL (FIPS)	fips-20190808	2019-08-08	cpe:2.3:a:google:boringssl:*
c-ares	1.17.2	2021-07-24	cpe:2.3:a:c-ares_project:c-ares:*
fmt	7.0.3	2020-08-06	cpe:2.3:a:fmt:fmt:*
gperftools	2.8	2020-07-06	cpe:2.3:a:gperftools_project:gperftools:*
gRPC	1.34.0	2020-12-01	cpe:2.3:a:grpc:grpc:*
HTTP Parser	4f15b7d	2020-07-10	cpe:2.3:a:nodejs:node.js:*
libcircllhist	63a16dd	2019-02-11
libevent	62c152d	2020-07-28	cpe:2.3:a:libevent_project:libevent:*
Nghttp2	1.41.0	2020-06-02	cpe:2.3:a:nghttp2:nghttp2:*
Protocol Buffers	3.14.0	2020-11-13	cpe:2.3:a:google:protobuf:*
RapidJSON	dfbe1db	2019-12-03	cpe:2.3:a:tencent:rapidjson:*
RE2	2020-07-06	2020-07-06
spdlog	1.7.0	2020-07-09
tcmalloc	9f38535	2020-11-04
upb	de76b31	2020-12-29
xxHash	0.7.3	2020-03-05
yaml-cpp	98acc5a	2020-07-27	cpe:2.3:a:yaml-cpp_project:yaml-cpp:*
zlib	79baebe	2019-04-14	cpe:2.3:a:gnu:zlib:*
zlib-ng	b802a30	2020-10-18

API

Name	Version	Release date	CPE
bazel-skylib	1.0.3	2020-08-27
Go rules for Bazel	0.25.0	2020-12-02
Google APIs	82944da	2019-12-02
OpenCensus Proto	0.3.0	2020-07-21
Prometheus client model	60555c9	2020-06-23
Protobuf Rules for Bazel	4029855	2020-08-17
protoc-gen-validate (PGV)	872b28c	2021-01-05
SkyWalking API	8.1.0	2020-07-29
xDS API	cc1b757	2020-12-11
Zipkin API	0.2.2	2019-08-23

Observability (core)

Name	Version	Release date	CPE
libcircllhist	63a16dd	2019-02-11

Observability (extensions)

envoy.filters.http.aws_lambda

Name	Version	Release date	CPE
curl	7.74.0	2020-12-09	cpe:2.3:a:haxx:curl:*

envoy.filters.http.aws_request_signing

Name	Version	Release date	CPE
curl	7.74.0	2020-12-09	cpe:2.3:a:haxx:curl:*

envoy.grpc_credentials.aws_iam

Name	Version	Release date	CPE
curl	7.74.0	2020-12-09	cpe:2.3:a:haxx:curl:*

envoy.tracers.datadog

Name	Version	Release date	CPE
Datadog OpenTracing C++ Client	1.1.5	2020-05-15
msgpack for C/C++	3.3.0	2020-06-05
OpenTracing	1.5.1	2019-01-16

envoy.tracers.dynamic_ot

Name	Version	Release date	CPE
OpenTracing	1.5.1	2019-01-16

envoy.tracers.lightstep

Name	Version	Release date	CPE
lightstep-tracer-cpp	1942b3f	2020-08-25
OpenTracing	1.5.1	2019-01-16

envoy.tracers.opencensus

Name	Version	Release date	CPE
curl	7.74.0	2020-12-09	cpe:2.3:a:haxx:curl:*
OpenCensus C++	ba63106	2020-10-08

Build

Name	Version	Release date	CPE
Apple Rules for Bazel	0.19.0	2019-10-10
bazel-compilation-database	0.4.5	2020-08-01
bazel-toolchains	3.7.1	2020-11-26
C++ rules for Bazel	b1c40e1	2020-11-11
Emscripten SDK	2.0.7	2020-10-13
envoy-build-tools	f2a7f9b	2021-01-04
Gazelle	0.22.2	2020-10-02
Go rules for Bazel	0.25.0	2020-12-02
Python rules for Bazel	a0fbf98	2020-04-09
Rules for using foreign build systems in Bazel	d54c78a	2020-10-26

Miscellaneous

Name	Version	Release date	CPE
Six	1.12.0	2018-12-09
tclap	1-2-1	2011-04-16

Test only

Below we provide the status of the C/C++ dependencies that are only used in tests. Tests also include additional Java, Rust and Python dependencies that are not tracked below.

Name	Version	Release date	CPE
Benchmark	1.5.1	2020-06-09
compiler-rt	10.0.0	2020-03-23
Google Test	a4ab0ab	2020-09-10
Kafka (Python client)	2.0.1	2020-02-20
Kafka (server binary)	2.4.1	2020-03-12
libprotobuf-mutator	8942a9b	2020-08-18
twitter.common.finagle-thrift	0.3.9	2016-10-17
twitter.common.lang (Thrift)	0.3.9	2016-10-17
twitter.common.rpc (Thrift)	0.3.9	2016-10-17
WebAssembly for Proxies (Rust SDK)	802cab2	2020-12-05