External dependencies

Below we enumerate the external dependencies that may be linked into the Envoy binary. We exclude dependencies that only are used in CI or developer tooling above.

Data plane (core)

Name	Version	Release date	CPE
Abseil	17c954d	2021-06-03
BoringSSL	648cbaf	2021-07-15	cpe:2.3:a:google:boringssl:*
BoringSSL (FIPS)	fips-20190808	2019-08-08	cpe:2.3:a:google:boringssl:*
c-ares	1.18.1	2021-10-27	cpe:2.3:a:c-ares_project:c-ares:*
fmt	7.0.3	2020-08-07	cpe:2.3:a:fmt:fmt:*
gperftools	2.9.1	2021-03-03	cpe:2.3:a:gperftools_project:gperftools:*
gRPC	a3ae8e0	2021-06-07	cpe:2.3:a:grpc:grpc:*
HTTP Parser	4f15b7d	2020-07-10	cpe:2.3:a:nodejs:node.js:*
libcircllhist	63a16dd	2019-02-11
libevent	62c152d	2020-07-28	cpe:2.3:a:libevent_project:libevent:*
Nghttp2	1.46.0	2021-10-19	cpe:2.3:a:nghttp2:nghttp2:*
nlohmann JSON	3.10.5	2022-01-03	cpe:2.3:a:json-for-modern-cpp_project:json-for-modern-cpp:*
Perfetto	22.1	2021-12-07
Protocol Buffers	3.19.1	2021-10-29	cpe:2.3:a:google:protobuf:*
QUICHE	5406cec	2022-01-10
RapidJSON	dfbe1db	2019-12-03	cpe:2.3:a:tencent:rapidjson:*
RE2	2021-11-01	2021-11-01
Rules for using foreign build systems in Bazel	6c0c2af	2021-09-22
spdlog	1.7.0	2020-07-09
tcmalloc	9f38535	2020-11-04
xxHash	0.8.1	2021-11-29
yaml-cpp	db6deed	2021-07-23	cpe:2.3:a:yaml-cpp_project:yaml-cpp:*
zlib	79baebe	2019-04-14	cpe:2.3:a:gnu:zlib:*
zlib-ng	2.0.6	2021-12-24

Data plane (extensions)

envoy.access_loggers.extension_filters.cel

Name	Version	Release date	CPE
ANTLR Rules for Bazel	3cc2f95	2019-06-21
ANTLR v4	4.7.2	2018-12-18
Common Expression Language (CEL) C++ library	60c7aea	2021-11-08
FlatBuffers	2.0.0	2021-05-10	cpe:2.3:a:google:flatbuffers:*

envoy.access_loggers.wasm

Name	Version	Release date	CPE
ANTLR Rules for Bazel	3cc2f95	2019-06-21
ANTLR v4	4.7.2	2018-12-18
Common Expression Language (CEL) C++ library	60c7aea	2021-11-08
FlatBuffers	2.0.0	2021-05-10	cpe:2.3:a:google:flatbuffers:*
WebAssembly for Proxies (C++ host implementation)	2be7a28	2022-01-03
WebAssembly for Proxies (C++ SDK)	fd0be84	2021-06-24

envoy.bootstrap.wasm

Name	Version	Release date	CPE
ANTLR Rules for Bazel	3cc2f95	2019-06-21
ANTLR v4	4.7.2	2018-12-18
Common Expression Language (CEL) C++ library	60c7aea	2021-11-08
FlatBuffers	2.0.0	2021-05-10	cpe:2.3:a:google:flatbuffers:*
WebAssembly for Proxies (C++ host implementation)	2be7a28	2022-01-03
WebAssembly for Proxies (C++ SDK)	fd0be84	2021-06-24

envoy.compression.brotli.compressor

Name	Version	Release date	CPE
brotli	0cd2e39	2020-09-08	cpe:2.3:a:google:brotli:*

envoy.compression.brotli.decompressor

Name	Version	Release date	CPE
brotli	0cd2e39	2020-09-08	cpe:2.3:a:google:brotli:*

envoy.filters.http.aws_lambda

Name	Version	Release date	CPE
curl	7.80.0	2021-11-10	cpe:2.3:a:haxx:libcurl:*

envoy.filters.http.aws_request_signing

Name	Version	Release date	CPE
curl	7.80.0	2021-11-10	cpe:2.3:a:haxx:libcurl:*

envoy.filters.http.grpc_json_transcoder

Name	Version	Release date	CPE
grpc-httpjson-transcoding	9e2a4b5	2022-01-06

envoy.filters.http.jwt_authn

Name	Version	Release date	CPE
jwt_verify_lib	e5d6cf7	2021-03-05

envoy.filters.http.lua

Name	Version	Release date	CPE
LuaJIT	1d8b747	2020-10-12	cpe:2.3:a:luajit:luajit:*
Moonjit	2.2.0	2020-01-14	cpe:2.3:a:moonjit_project:moonjit:*

envoy.filters.http.rbac

Name	Version	Release date	CPE
Common Expression Language (CEL) C++ library	60c7aea	2021-11-08
FlatBuffers	2.0.0	2021-05-10	cpe:2.3:a:google:flatbuffers:*

envoy.filters.http.wasm

Name	Version	Release date	CPE
ANTLR Rules for Bazel	3cc2f95	2019-06-21
ANTLR v4	4.7.2	2018-12-18
Common Expression Language (CEL) C++ library	60c7aea	2021-11-08
FlatBuffers	2.0.0	2021-05-10	cpe:2.3:a:google:flatbuffers:*
WebAssembly for Proxies (C++ host implementation)	2be7a28	2022-01-03
WebAssembly for Proxies (C++ SDK)	fd0be84	2021-06-24

envoy.filters.network.dubbo_proxy

Name	Version	Release date	CPE
hessian2-codec	dd8e054	2021-04-05

envoy.filters.network.kafka_broker

Name	Version	Release date	CPE
Kafka (source)	3.0.0	2021-09-08	cpe:2.3:a:apache:kafka:*

envoy.filters.network.kafka_mesh

Name	Version	Release date	CPE
Kafka (C/C++ client)	1.8.2	2021-10-18
Kafka (source)	3.0.0	2021-09-08	cpe:2.3:a:apache:kafka:*

envoy.filters.network.mysql_proxy

Name	Version	Release date	CPE
C++ SQL Parser Library	3b40ba2	2020-06-10

envoy.filters.network.postgres_proxy

Name	Version	Release date	CPE
C++ SQL Parser Library	3b40ba2	2020-06-10

envoy.filters.network.rbac

Name	Version	Release date	CPE
Common Expression Language (CEL) C++ library	60c7aea	2021-11-08
FlatBuffers	2.0.0	2021-05-10	cpe:2.3:a:google:flatbuffers:*

envoy.filters.network.wasm

Name	Version	Release date	CPE
ANTLR Rules for Bazel	3cc2f95	2019-06-21
ANTLR v4	4.7.2	2018-12-18
Common Expression Language (CEL) C++ library	60c7aea	2021-11-08
FlatBuffers	2.0.0	2021-05-10	cpe:2.3:a:google:flatbuffers:*
WebAssembly for Proxies (C++ host implementation)	2be7a28	2022-01-03
WebAssembly for Proxies (C++ SDK)	fd0be84	2021-06-24

envoy.grpc_credentials.aws_iam

Name	Version	Release date	CPE
curl	7.80.0	2021-11-10	cpe:2.3:a:haxx:libcurl:*

envoy.rate_limit_descriptors.expr

Name	Version	Release date	CPE
ANTLR Rules for Bazel	3cc2f95	2019-06-21
ANTLR v4	4.7.2	2018-12-18
Common Expression Language (CEL) C++ library	60c7aea	2021-11-08
FlatBuffers	2.0.0	2021-05-10	cpe:2.3:a:google:flatbuffers:*

envoy.rbac.matchers.upstream_ip_port

Name	Version	Release date	CPE
Common Expression Language (CEL) C++ library	60c7aea	2021-11-08
FlatBuffers	2.0.0	2021-05-10	cpe:2.3:a:google:flatbuffers:*

envoy.stat_sinks.wasm

Name	Version	Release date	CPE
ANTLR Rules for Bazel	3cc2f95	2019-06-21
ANTLR v4	4.7.2	2018-12-18
Common Expression Language (CEL) C++ library	60c7aea	2021-11-08
FlatBuffers	2.0.0	2021-05-10	cpe:2.3:a:google:flatbuffers:*
WebAssembly for Proxies (C++ host implementation)	2be7a28	2022-01-03
WebAssembly for Proxies (C++ SDK)	fd0be84	2021-06-24

envoy.tls.key_providers.cryptomb

Name	Version	Release date	CPE
libipp-crypto	2021.5	2021-12-21	cpe:2.3:a:intel:cryptography_for_intel_integrated_performance_primitives:*

envoy.tracers.opencensus

Name	Version	Release date	CPE
curl	7.80.0	2021-11-10	cpe:2.3:a:haxx:libcurl:*

envoy.wasm.runtime.null

Name	Version	Release date	CPE
WebAssembly for Proxies (C++ host implementation)	2be7a28	2022-01-03
WebAssembly for Proxies (C++ SDK)	fd0be84	2021-06-24

envoy.wasm.runtime.v8

Name	Version	Release date	CPE
V8	9.8.177.5	2022-01-07	cpe:2.3:a:google:v8:*
WebAssembly for Proxies (C++ host implementation)	2be7a28	2022-01-03
WebAssembly for Proxies (C++ SDK)	fd0be84	2021-06-24

envoy.wasm.runtime.wamr

Name	Version	Release date	CPE
LLVM	12.0.1	2021-07-09	cpe:2.3:a:llvm:*:*
WebAssembly for Proxies (C++ host implementation)	2be7a28	2022-01-03
WebAssembly for Proxies (C++ SDK)	fd0be84	2021-06-24
Webassembly Micro Runtime	WAMR-08-10-2021	2021-08-10

envoy.wasm.runtime.wasmtime

Name	Version	Release date	CPE
Bazel rust rules	82b650d	2021-10-19
wasm-c-api	c9d3128	2021-01-11
wasmtime	0.32.0	2021-12-13	cpe:2.3:a:bytecodealliance:wasmtime:*
WebAssembly for Proxies (C++ host implementation)	2be7a28	2022-01-03
WebAssembly for Proxies (C++ SDK)	fd0be84	2021-06-24

envoy.wasm.runtime.wavm

Name	Version	Release date	CPE
LLVM	12.0.1	2021-07-09	cpe:2.3:a:llvm:*:*
WAVM	c8997eb	2021-12-15	cpe:2.3:a:webassembly_virtual_machine_project:webassembly_virtual_machine:*
WebAssembly for Proxies (C++ host implementation)	2be7a28	2022-01-03
WebAssembly for Proxies (C++ SDK)	fd0be84	2021-06-24

Control plane

Name	Version	Release date	CPE
Abseil	17c954d	2021-06-03
BoringSSL	648cbaf	2021-07-15	cpe:2.3:a:google:boringssl:*
BoringSSL (FIPS)	fips-20190808	2019-08-08	cpe:2.3:a:google:boringssl:*
c-ares	1.18.1	2021-10-27	cpe:2.3:a:c-ares_project:c-ares:*
fmt	7.0.3	2020-08-07	cpe:2.3:a:fmt:fmt:*
gperftools	2.9.1	2021-03-03	cpe:2.3:a:gperftools_project:gperftools:*
gRPC	a3ae8e0	2021-06-07	cpe:2.3:a:grpc:grpc:*
HTTP Parser	4f15b7d	2020-07-10	cpe:2.3:a:nodejs:node.js:*
libcircllhist	63a16dd	2019-02-11
libevent	62c152d	2020-07-28	cpe:2.3:a:libevent_project:libevent:*
Nghttp2	1.46.0	2021-10-19	cpe:2.3:a:nghttp2:nghttp2:*
nlohmann JSON	3.10.5	2022-01-03	cpe:2.3:a:json-for-modern-cpp_project:json-for-modern-cpp:*
Perfetto	22.1	2021-12-07
Protocol Buffers	3.19.1	2021-10-29	cpe:2.3:a:google:protobuf:*
RapidJSON	dfbe1db	2019-12-03	cpe:2.3:a:tencent:rapidjson:*
RE2	2021-11-01	2021-11-01
Rules for using foreign build systems in Bazel	6c0c2af	2021-09-22
spdlog	1.7.0	2020-07-09
tcmalloc	9f38535	2020-11-04
upb	de76b31	2020-12-29
xxHash	0.8.1	2021-11-29
yaml-cpp	db6deed	2021-07-23	cpe:2.3:a:yaml-cpp_project:yaml-cpp:*
zlib	79baebe	2019-04-14	cpe:2.3:a:gnu:zlib:*
zlib-ng	2.0.6	2021-12-24

API

Name	Version	Release date	CPE
Bazel build tools	4.2.4	2021-12-03
bazel-skylib	1.1.1	2021-09-27
buf	0.53.0	2021-08-25
Go rules for Bazel	0.29.0	2021-10-06
Google APIs	82944da	2019-12-02
OpenCensus Proto	0.3.0	2020-07-21
OpenTelemetry Proto	0.11.0	2021-10-07
Prometheus client model	147c58e	2021-06-07
Protobuf Rules for Bazel	4.0.0	2021-09-15
protoc-gen-validate (PGV)	0.6.2	2021-10-21
xDS API	d92e9ce	2021-12-16
Zipkin API	1.0.0	2020-11-22

Observability (core)

Name	Version	Release date	CPE
libcircllhist	63a16dd	2019-02-11

Observability (extensions)

envoy.filters.http.aws_lambda

Name	Version	Release date	CPE
curl	7.80.0	2021-11-10	cpe:2.3:a:haxx:libcurl:*

envoy.filters.http.aws_request_signing

Name	Version	Release date	CPE
curl	7.80.0	2021-11-10	cpe:2.3:a:haxx:libcurl:*

envoy.grpc_credentials.aws_iam

Name	Version	Release date	CPE
curl	7.80.0	2021-11-10	cpe:2.3:a:haxx:libcurl:*

envoy.tracers.datadog

Name	Version	Release date	CPE
Datadog OpenTracing C++ Client	1.2.1	2021-01-27
msgpack for C/C++	3.3.0	2020-06-05
OpenTracing	1.5.1	2019-01-16

envoy.tracers.dynamic_ot

Name	Version	Release date	CPE
OpenTracing	1.5.1	2019-01-16

envoy.tracers.lightstep

Name	Version	Release date	CPE
lightstep-tracer-cpp	1942b3f	2020-08-25
OpenTracing	1.5.1	2019-01-16

envoy.tracers.opencensus

Name	Version	Release date	CPE
curl	7.80.0	2021-11-10	cpe:2.3:a:haxx:libcurl:*
OpenCensus C++	ba63106	2020-10-08

envoy.tracers.skywalking

Name	Version	Release date	CPE
cpp2sky	0.3.1	2021-06-17
skywalking-data-collect-protocol	8.9.1	2021-12-11	cpe:2.3:a:apache:skywalking:*

Build

Name	Version	Release date	CPE
Apple Rules for Bazel	0.32.0	2021-10-29
bazel-compilation-database	0.5.2	2021-09-10
bazel-toolchains	4.1.0	2021-05-21
C++ rules for Bazel	0.0.1	2021-10-07
Emscripten SDK	2.0.7	2020-10-13
envoy-build-tools	55a7bbe	2021-09-28
Gazelle	0.24.0	2021-10-11
Go rules for Bazel	0.29.0	2021-10-06
Packaging rules for Bazel	e5d1ed4	2021-12-15
Python rules for Bazel	0.6.0	2022-01-05
Rules for using foreign build systems in Bazel	6c0c2af	2021-09-22

Miscellaneous

Name	Version	Release date	CPE
su-exec	212b751	2019-09-18
tclap	1-2-1	2011-04-16	cpe:2.3:a:tclap_project:tclap:*

envoy.bootstrap.vcl

Name	Version	Release date	CPE
VPP Comms Library	7c3275e	2021-12-10

envoy.filters.http.sxg

Name	Version	Release date	CPE
libsxg	beaa393	2021-07-08

Test only

Below we provide the status of the C/C++ dependencies that are only used in tests. Tests also include additional Java, Rust and Python dependencies that are not tracked below.

Name	Version	Release date	CPE
Benchmark	1.5.1	2020-06-09
compiler-rt	12.0.1	2021-07-09	cpe:2.3:a:llvm:compiler-rt:*
Fuzzing Rules for Bazel	0.2.0	2021-07-12
Google Test	a4ab0ab	2020-09-10	cpe:2.3:a:google:google_test:*
Kafka (Python client)	2.0.2	2020-09-30
Kafka (server binary)	3.0.0	2021-09-20
libprotobuf-mutator	1.0	2020-11-13
twitter.common.finagle-thrift	0.3.9	2016-10-17
twitter.common.lang (Thrift)	0.3.9	2016-10-17
twitter.common.rpc (Thrift)	0.3.9	2016-10-17
WebAssembly for Proxies (Rust SDK)	abd0f54	2021-07-13