External dependencies

Below we enumerate the external dependencies that may be linked into the Envoy binary. We exclude dependencies that only are used in CI or developer tooling above.

Data plane (core)

External dependencies: dataplane_core

Name	Version	Release date	CPE	License
Abseil	20230802.1	2023-09-18		Apache-2.0
BoringSSL	45cf810	2023-08-28	cpe:2.3:a:google:boringssl:*	Mixed
BoringSSL (FIPS)	fips-20210429	2021-04-29	cpe:2.3:a:google:boringssl:*
c-ares	1.19.1	2023-05-22	cpe:2.3:a:c-ares_project:c-ares:*	c-ares
fmt	9.1.0	2022-08-27	cpe:2.3:a:fmt:fmt:*	fmt
gperftools	2.10	2022-05-31	cpe:2.3:a:gperftools_project:gperftools:*	BSD-3-Clause
gRPC	1.59.4	2024-02-05	cpe:2.3:a:grpc:grpc:*	Apache-2.0
libcircllhist	39f9db7	2019-05-21		Apache-2.0
libevent	62c152d	2020-07-28	cpe:2.3:a:libevent_project:libevent:*	BSD-3-Clause
liburing	2.3	2022-10-26
Nghttp2	1.61.0	2024-04-04	cpe:2.3:a:nghttp2:nghttp2:*	MIT
nlohmann JSON	3.11.3	2023-11-28	cpe:2.3:a:json-for-modern-cpp_project:json-for-modern-cpp:*	MIT
Perfetto	40.0	2023-12-05		Apache-2.0
Protocol Buffers	23.4	2023-07-06	cpe:2.3:a:google:protobuf:*	Protocol Buffers
Protocol Buffers (protoc) linux_aarch_64	23.4	2023-07-06		Protocol Buffers
Protocol Buffers (protoc) linux_x86_64	23.4	2023-07-06		Protocol Buffers
Protocol Buffers (protoc) osx_aarch_64	23.4	2023-07-06		Protocol Buffers
Protocol Buffers (protoc) osx_x86_64	23.4	2023-07-06		Protocol Buffers
Protocol Buffers (protoc) win64	23.4	2023-07-06		Protocol Buffers
QUICHE	9e87593	2024-02-15		BSD-3-Clause
RE2	2023-11-01	2023-10-31		BSD-3-Clause
Rules for using foreign build systems in Bazel	0.9.0	2022-08-02		Apache-2.0
rules_license	0.0.7	2023-06-16		Apache-2.0
spdlog	1.12.0	2023-07-08		MIT
tcmalloc	e33c7bc	2022-10-24		Apache-2.0
utf8_range	d863bc3	2023-05-26		MIT
xxHash	0.8.2	2023-07-21		BSD-2-Clause
yaml-cpp	0.8.0	2023-08-10	cpe:2.3:a:yaml-cpp_project:yaml-cpp:*	MIT
zlib	1.2.13	2022-10-14	cpe:2.3:a:gnu:zlib:*	zlib
zlib-ng	2.0.7	2023-03-17		zlib

envoy.wasm.runtime.wasmtime

Name	Version	Release date	CPE	License
Bazel rust rules	0.35.0	2023-12-27		Apache-2.0

Data plane (extensions)

External dependencies: dataplane_ext

envoy.access_loggers.extension_filters.cel

Name	Version	Release date	CPE	License
Common Expression Language (CEL) C++ library	0abd738	2023-12-20
FlatBuffers	23.3.3	2023-03-03	cpe:2.3:a:google:flatbuffers:*	Apache-2.0

envoy.access_loggers.wasm

Name	Version	Release date	CPE	License
Common Expression Language (CEL) C++ library	0abd738	2023-12-20
FlatBuffers	23.3.3	2023-03-03	cpe:2.3:a:google:flatbuffers:*	Apache-2.0
WebAssembly for Proxies (C++ host implementation)	e200fee	2023-12-19		Apache-2.0
WebAssembly for Proxies (C++ SDK)	921039a	2023-05-01		Apache-2.0

envoy.bootstrap.wasm

Name	Version	Release date	CPE	License
Common Expression Language (CEL) C++ library	0abd738	2023-12-20
FlatBuffers	23.3.3	2023-03-03	cpe:2.3:a:google:flatbuffers:*	Apache-2.0
WebAssembly for Proxies (C++ host implementation)	e200fee	2023-12-19		Apache-2.0
WebAssembly for Proxies (C++ SDK)	921039a	2023-05-01		Apache-2.0

envoy.compression.brotli.compressor

Name	Version	Release date	CPE	License
brotli	1.1.0	2023-08-31	cpe:2.3:a:google:brotli:*	MIT

envoy.compression.brotli.decompressor

Name	Version	Release date	CPE	License
brotli	1.1.0	2023-08-31	cpe:2.3:a:google:brotli:*	MIT

envoy.compression.qatzip.compressor

Name	Version	Release date	CPE	License
LZ4	1.9.4	2022-08-15
qatlib	23.11.0	2023-11-15		BSD-3-Clause
qatzip	1.1.2	2023-03-24		BSD-3-Clause

envoy.compression.zstd.compressor

Name	Version	Release date	CPE	License
zstd	1.5.5	2023-04-04	cpe:2.3:a:facebook:zstandard:*

envoy.compression.zstd.decompressor

Name	Version	Release date	CPE	License
zstd	1.5.5	2023-04-04	cpe:2.3:a:facebook:zstandard:*

envoy.filters.http.aws_lambda

Name	Version	Release date	CPE	License
curl	8.9.1	2024-07-31	cpe:2.3:a:haxx:libcurl:*	curl

envoy.filters.http.aws_request_signing

Name	Version	Release date	CPE	License
curl	8.9.1	2024-07-31	cpe:2.3:a:haxx:libcurl:*	curl

envoy.filters.http.gcp_authn

Name	Version	Release date	CPE	License
jwt_verify_lib	b59e807	2023-05-17		Apache-2.0

envoy.filters.http.grpc_field_extraction

Name	Version	Release date	CPE	License
grpc-httpjson-transcoding	ff41eb3	2023-06-07		Apache-2.0
ocp	e965ac0	2023-05-05		Apache-2.0
proto-converter	d77ff30	2023-06-07		Apache-2.0
proto-field-extraction	2dfe275	2023-07-18		Apache-2.0

envoy.filters.http.grpc_json_transcoder

Name	Version	Release date	CPE	License
grpc-httpjson-transcoding	ff41eb3	2023-06-07		Apache-2.0
proto-converter	d77ff30	2023-06-07		Apache-2.0
proto-field-extraction	2dfe275	2023-07-18		Apache-2.0

envoy.filters.http.jwt_authn

Name	Version	Release date	CPE	License
jwt_verify_lib	b59e807	2023-05-17		Apache-2.0

envoy.filters.http.language

Name	Version	Release date	CPE	License
ICU Library	72-1	2022-10-18		ICU

envoy.filters.http.lua

Name	Version	Release date	CPE	License
LuaJIT	1c27912	2023-04-16	cpe:2.3:a:luajit:luajit:*	MIT

envoy.filters.http.rate_limit_quota

Name	Version	Release date	CPE	License
Common Expression Language (CEL) C++ library	0abd738	2023-12-20
FlatBuffers	23.3.3	2023-03-03	cpe:2.3:a:google:flatbuffers:*	Apache-2.0

envoy.filters.http.rbac

Name	Version	Release date	CPE	License
Common Expression Language (CEL) C++ library	0abd738	2023-12-20
FlatBuffers	23.3.3	2023-03-03	cpe:2.3:a:google:flatbuffers:*	Apache-2.0

envoy.filters.http.wasm

Name	Version	Release date	CPE	License
Common Expression Language (CEL) C++ library	0abd738	2023-12-20
FlatBuffers	23.3.3	2023-03-03	cpe:2.3:a:google:flatbuffers:*	Apache-2.0
WebAssembly for Proxies (C++ host implementation)	e200fee	2023-12-19		Apache-2.0
WebAssembly for Proxies (C++ SDK)	921039a	2023-05-01		Apache-2.0

envoy.filters.network.dubbo_proxy

Name	Version	Release date	CPE	License
hessian2-codec	e9bb36e	2022-10-10		Apache-2.0

envoy.filters.network.kafka_broker

Name	Version	Release date	CPE	License
Kafka (source)	3.5.1	2023-07-14	cpe:2.3:a:apache:kafka:*	Apache-2.0

envoy.filters.network.kafka_mesh

Name	Version	Release date	CPE	License
Kafka (C/C++ client)	2.3.0	2023-10-25		librdkafka
Kafka (source)	3.5.1	2023-07-14	cpe:2.3:a:apache:kafka:*	Apache-2.0

envoy.filters.network.mysql_proxy

Name	Version	Release date	CPE	License
C++ SQL Parser Library	3b40ba2	2020-06-10		MIT

envoy.filters.network.postgres_proxy

Name	Version	Release date	CPE	License
C++ SQL Parser Library	3b40ba2	2020-06-10		MIT

envoy.filters.network.rbac

Name	Version	Release date	CPE	License
Common Expression Language (CEL) C++ library	0abd738	2023-12-20
FlatBuffers	23.3.3	2023-03-03	cpe:2.3:a:google:flatbuffers:*	Apache-2.0

envoy.filters.network.wasm

Name	Version	Release date	CPE	License
Common Expression Language (CEL) C++ library	0abd738	2023-12-20
FlatBuffers	23.3.3	2023-03-03	cpe:2.3:a:google:flatbuffers:*	Apache-2.0
WebAssembly for Proxies (C++ host implementation)	e200fee	2023-12-19		Apache-2.0
WebAssembly for Proxies (C++ SDK)	921039a	2023-05-01		Apache-2.0

envoy.formatter.cel

Name	Version	Release date	CPE	License
Common Expression Language (CEL) C++ library	0abd738	2023-12-20
FlatBuffers	23.3.3	2023-03-03	cpe:2.3:a:google:flatbuffers:*	Apache-2.0

envoy.geoip_providers.maxmind

Name	Version	Release date	CPE	License
maxmind_libmaxminddb	1.8.0	2023-11-07	cpe:2.3:a:maxmind:libmaxminddb:*	Apache-2.0

envoy.grpc_credentials.aws_iam

Name	Version	Release date	CPE	License
curl	8.9.1	2024-07-31	cpe:2.3:a:haxx:libcurl:*	curl

envoy.matching.input_matchers.hyperscan

Name	Version	Release date	CPE	License
Boost	1.84.0	2023-12-13	cpe:2.3:a:boost:boost:*	Boost
Colm	2d8ba76	2021-12-28		MIT
Hyperscan	5.4.2	2023-04-19		BSD-3-Clause
Ragel	d4577c9	2021-12-28		MIT
Vectorscan	5.4.11	2023-11-20		BSD-3-Clause

envoy.matching.inputs.cel_data_input

Name	Version	Release date	CPE	License
Common Expression Language (CEL) C++ library	0abd738	2023-12-20
FlatBuffers	23.3.3	2023-03-03	cpe:2.3:a:google:flatbuffers:*	Apache-2.0

envoy.matching.matchers.cel_matcher

Name	Version	Release date	CPE	License
Common Expression Language (CEL) C++ library	0abd738	2023-12-20
FlatBuffers	23.3.3	2023-03-03	cpe:2.3:a:google:flatbuffers:*	Apache-2.0

envoy.network.connection_balance.dlb

Name	Version	Release date	CPE	License
Intel Dlb	8.0.0	2022-12-15

envoy.rate_limit_descriptors.expr

Name	Version	Release date	CPE	License
Common Expression Language (CEL) C++ library	0abd738	2023-12-20
FlatBuffers	23.3.3	2023-03-03	cpe:2.3:a:google:flatbuffers:*	Apache-2.0

envoy.rbac.matchers.upstream_ip_port

Name	Version	Release date	CPE	License
Common Expression Language (CEL) C++ library	0abd738	2023-12-20
FlatBuffers	23.3.3	2023-03-03	cpe:2.3:a:google:flatbuffers:*	Apache-2.0

envoy.regex_engines.hyperscan

Name	Version	Release date	CPE	License
Boost	1.84.0	2023-12-13	cpe:2.3:a:boost:boost:*	Boost
Colm	2d8ba76	2021-12-28		MIT
Hyperscan	5.4.2	2023-04-19		BSD-3-Clause
Ragel	d4577c9	2021-12-28		MIT
Vectorscan	5.4.11	2023-11-20		BSD-3-Clause

envoy.router.cluster_specifier_plugin.lua

Name	Version	Release date	CPE	License
LuaJIT	1c27912	2023-04-16	cpe:2.3:a:luajit:luajit:*	MIT

envoy.stat_sinks.wasm

Name	Version	Release date	CPE	License
Common Expression Language (CEL) C++ library	0abd738	2023-12-20
FlatBuffers	23.3.3	2023-03-03	cpe:2.3:a:google:flatbuffers:*	Apache-2.0
WebAssembly for Proxies (C++ host implementation)	e200fee	2023-12-19		Apache-2.0
WebAssembly for Proxies (C++ SDK)	921039a	2023-05-01		Apache-2.0

envoy.tls.key_providers.cryptomb

Name	Version	Release date	CPE	License
libipp-crypto	2021.6	2022-08-09	cpe:2.3:a:intel:cryptography_for_intel_integrated_performance_primitives:*	Apache-2.0

envoy.tls.key_providers.qat

Name	Version	Release date	CPE	License
qatlib	23.11.0	2023-11-15		BSD-3-Clause

envoy.tracers.opencensus

Name	Version	Release date	CPE	License
curl	8.9.1	2024-07-31	cpe:2.3:a:haxx:libcurl:*	curl

envoy.transport_sockets.alts

Name	Version	Release date	CPE	License
Protobuf and gRPC rules for Bazel	4.6.0	2023-12-14		Apache-2.0

envoy.wasm.runtime.null

Name	Version	Release date	CPE	License
WebAssembly for Proxies (C++ host implementation)	e200fee	2023-12-19		Apache-2.0
WebAssembly for Proxies (C++ SDK)	921039a	2023-05-01		Apache-2.0

envoy.wasm.runtime.v8

Name	Version	Release date	CPE	License
Chromium’s trace event headers	521ac34	2022-10-12
V8	10.7.193.13	2022-10-12	cpe:2.3:a:google:v8:*
WebAssembly for Proxies (C++ host implementation)	e200fee	2023-12-19		Apache-2.0
WebAssembly for Proxies (C++ SDK)	921039a	2023-05-01		Apache-2.0

envoy.wasm.runtime.wamr

Name	Version	Release date	CPE	License
LLVM	12.0.1	2021-07-09	cpe:2.3:a:llvm:*:*	Apache-2.0
WebAssembly for Proxies (C++ host implementation)	e200fee	2023-12-19		Apache-2.0
WebAssembly for Proxies (C++ SDK)	921039a	2023-05-01		Apache-2.0
Webassembly Micro Runtime	WAMR-1.2.2	2023-05-16		Apache-2.0

envoy.wasm.runtime.wasmtime

Name	Version	Release date	CPE	License
Bazel rust rules	0.35.0	2023-12-27		Apache-2.0
wasm-c-api	c9d3128	2021-01-11		Apache-2.0
wasmtime	9.0.3	2023-05-31	cpe:2.3:a:bytecodealliance:wasmtime:*	Apache-2.0
WebAssembly for Proxies (C++ host implementation)	e200fee	2023-12-19		Apache-2.0
WebAssembly for Proxies (C++ SDK)	921039a	2023-05-01		Apache-2.0

envoy.wasm.runtime.wavm

Name	Version	Release date	CPE	License
LLVM	12.0.1	2021-07-09	cpe:2.3:a:llvm:*:*	Apache-2.0
WAVM	3f9a150	2022-05-14	cpe:2.3:a:webassembly_virtual_machine_project:webassembly_virtual_machine:*
WebAssembly for Proxies (C++ host implementation)	e200fee	2023-12-19		Apache-2.0
WebAssembly for Proxies (C++ SDK)	921039a	2023-05-01		Apache-2.0

Control plane

External dependencies: controlplane

Name	Version	Release date	CPE	License
Abseil	20230802.1	2023-09-18		Apache-2.0
BoringSSL	45cf810	2023-08-28	cpe:2.3:a:google:boringssl:*	Mixed
BoringSSL (FIPS)	fips-20210429	2021-04-29	cpe:2.3:a:google:boringssl:*
c-ares	1.19.1	2023-05-22	cpe:2.3:a:c-ares_project:c-ares:*	c-ares
fmt	9.1.0	2022-08-27	cpe:2.3:a:fmt:fmt:*	fmt
gperftools	2.10	2022-05-31	cpe:2.3:a:gperftools_project:gperftools:*	BSD-3-Clause
gRPC	1.59.4	2024-02-05	cpe:2.3:a:grpc:grpc:*	Apache-2.0
libcircllhist	39f9db7	2019-05-21		Apache-2.0
libevent	62c152d	2020-07-28	cpe:2.3:a:libevent_project:libevent:*	BSD-3-Clause
liburing	2.3	2022-10-26
Nghttp2	1.61.0	2024-04-04	cpe:2.3:a:nghttp2:nghttp2:*	MIT
nlohmann JSON	3.11.3	2023-11-28	cpe:2.3:a:json-for-modern-cpp_project:json-for-modern-cpp:*	MIT
Perfetto	40.0	2023-12-05		Apache-2.0
Protocol Buffers	23.4	2023-07-06	cpe:2.3:a:google:protobuf:*	Protocol Buffers
Protocol Buffers (protoc) linux_aarch_64	23.4	2023-07-06		Protocol Buffers
Protocol Buffers (protoc) linux_x86_64	23.4	2023-07-06		Protocol Buffers
Protocol Buffers (protoc) osx_aarch_64	23.4	2023-07-06		Protocol Buffers
Protocol Buffers (protoc) osx_x86_64	23.4	2023-07-06		Protocol Buffers
Protocol Buffers (protoc) win64	23.4	2023-07-06		Protocol Buffers
QUICHE	9e87593	2024-02-15		BSD-3-Clause
RE2	2023-11-01	2023-10-31		BSD-3-Clause
Rules for using foreign build systems in Bazel	0.9.0	2022-08-02		Apache-2.0
rules_license	0.0.7	2023-06-16		Apache-2.0
spdlog	1.12.0	2023-07-08		MIT
tcmalloc	e33c7bc	2022-10-24		Apache-2.0
upb	e074c03	2023-07-21		upb
utf8_range	d863bc3	2023-05-26		MIT
xxHash	0.8.2	2023-07-21		BSD-2-Clause
yaml-cpp	0.8.0	2023-08-10	cpe:2.3:a:yaml-cpp_project:yaml-cpp:*	MIT
zlib	1.2.13	2022-10-14	cpe:2.3:a:gnu:zlib:*	zlib
zlib-ng	2.0.7	2023-03-17		zlib

envoy.wasm.runtime.wasmtime

Name	Version	Release date	CPE	License
Bazel rust rules	0.35.0	2023-12-27		Apache-2.0

API

External dependencies: api

Name	Version	Release date	CPE	License
bazel-skylib	1.5.0	2023-11-06		Apache-2.0
buf	1.28.1	2023-11-15		Apache-2.0
Go rules for Bazel	0.39.1	2023-04-20		Apache-2.0
Google APIs	114a745	2023-01-10		Apache-2.0
OpenCensus Proto	0.4.1	2022-09-23		Apache-2.0
OpenTelemetry Proto	1.0.0	2023-07-03		Apache-2.0
Prometheus client model	0.5.0	2023-10-03		Apache-2.0
Protobuf Rules for Bazel	4.0.0	2021-09-15		Apache-2.0
protoc-gen-validate (PGV)	1.0.2	2023-06-26		Apache-2.0
xDS API	3a472e5	2023-11-16		Apache-2.0
Zipkin API	1.0.0	2020-11-22		Apache-2.0

Observability (core)

External dependencies: observability_core

Name	Version	Release date	CPE	License
libcircllhist	39f9db7	2019-05-21		Apache-2.0

Observability (extensions)

External dependencies: observability_ext

envoy.filters.http.aws_lambda

Name	Version	Release date	CPE	License
curl	8.9.1	2024-07-31	cpe:2.3:a:haxx:libcurl:*	curl

envoy.filters.http.aws_request_signing

Name	Version	Release date	CPE	License
curl	8.9.1	2024-07-31	cpe:2.3:a:haxx:libcurl:*	curl

envoy.grpc_credentials.aws_iam

Name	Version	Release date	CPE	License
curl	8.9.1	2024-07-31	cpe:2.3:a:haxx:libcurl:*	curl

envoy.tracers.datadog

Name	Version	Release date	CPE	License
Datadog C++ Tracing Library	0.2.2	2024-06-21		Apache-2.0
OpenTracing	1.5.1	2019-01-16		Apache-2.0

envoy.tracers.dynamic_ot

Name	Version	Release date	CPE	License
OpenTracing	1.5.1	2019-01-16		Apache-2.0

envoy.tracers.opencensus

Name	Version	Release date	CPE	License
curl	8.9.1	2024-07-31	cpe:2.3:a:haxx:libcurl:*	curl
OpenCensus C++	f68a2d0	2022-09-20		Apache-2.0
RapidJSON	dfbe1db	2019-12-03	cpe:2.3:a:tencent:rapidjson:*	RapidJSON

envoy.tracers.skywalking

Name	Version	Release date	CPE	License
cpp2sky	0.4.0	2022-03-28		Apache-2.0
skywalking-data-collect-protocol	8.9.1	2021-12-11	cpe:2.3:a:apache:skywalking:*	Apache-2.0

envoy.tracers.zipkin

Name	Version	Release date	CPE	License
RapidJSON	dfbe1db	2019-12-03	cpe:2.3:a:tencent:rapidjson:*	RapidJSON

Build

External dependencies: build

Name	Version	Release date	CPE	License
Apple Rules for Bazel	3.1.1	2023-10-19		Apache-2.0
Aspect Bazel helpers	2.2.0	2024-01-08		Apache-2.0
bazel-compilation-database	4086479	2022-09-06		Apache-2.0
bazel-toolchains	5.1.2	2022-08-09		Apache-2.0
envoy-build-tools	7cd964f	2024-01-08		Apache-2.0
envoy_toolshed	0.1.3	2024-04-16		Apache-2.0
Gazelle	0.31.1	2023-06-13		Apache-2.0
Go rules for Bazel	0.39.1	2023-04-20		Apache-2.0
Packaging rules for Bazel	0.7.0	2022-04-07		Apache-2.0
protoc-gen-jsonschema	7680e49	2023-05-30
Python rules for Bazel	0.28.0	2024-01-08		Apache-2.0
Ruby rules for Bazel	37cf590	2023-01-12		Apache-2.0
Rules for using foreign build systems in Bazel	0.9.0	2022-08-02		Apache-2.0
rules_license	0.0.7	2023-06-16		Apache-2.0
Shellcheck rules for bazel	0.2.4	2023-10-27		MIT
utf8_range	d863bc3	2023-05-26		MIT

Miscellaneous

External dependencies: other

Name	Version	Release date	CPE	License
su-exec	212b751	2019-09-18		MIT
tclap	1.2.5	2021-11-01	cpe:2.3:a:tclap_project:tclap:*	MIT

envoy.bootstrap.vcl

Name	Version	Release date	CPE	License
VPP Comms Library	493b899	2023-06-28		Apache-2.0

envoy.filters.http.sxg

Name	Version	Release date	CPE	License
libsxg	beaa393	2021-07-08		Apache-2.0

Test only

Below we provide the status of the C/C++ dependencies that are only used in tests. Tests also include additional Java, Rust and Python dependencies that are not tracked below.

External dependencies: test_only

Name	Version	Release date	CPE	License
Bazel build tools	6.4.0	2023-11-15
Benchmark	1.8.3	2023-08-31		Apache-2.0
compiler-rt	14.0.0	2022-03-23	cpe:2.3:a:llvm:compiler-rt:*	Apache-2.0
Emscripten SDK	0ea8f8a	2022-03-09		Emscripten SDK
Fuzzing Rules for Bazel	0.4.1	2023-10-19		Apache-2.0
Google Test	a4ab0ab	2020-09-10	cpe:2.3:a:google:google_test:*	BSD-3-Clause
Kafka (Python client)	2.0.2	2020-09-30		Apache-2.0
Kafka (server binary)	3.5.1	2023-07-21
libpfm	4.11.0	2020-09-03
libprotobuf-mutator	3b28530	2023-04-25		Apache-2.0
WebAssembly for Proxies (Rust SDK)	0.2.1	2022-11-22		Apache-2.0