External dependencies

Below we enumerate the external dependencies that may be linked into the Envoy binary. We exclude dependencies that only are used in CI or developer tooling above.

Data plane (core)

Name

Version

Release date

CPE

Abseil

17c954d

2021-06-03

BoringSSL

75edea1

2021-05-13

cpe:2.3:a:google:boringssl:*

BoringSSL (FIPS)

fips-20190808

2019-08-08

cpe:2.3:a:google:boringssl:*

c-ares

1.17.1

2020-11-19

cpe:2.3:a:c-ares_project:c-ares:*

fmt

7.0.3

2020-08-07

cpe:2.3:a:fmt:fmt:*

gperftools

2.8

2020-07-06

cpe:2.3:a:gperftools_project:gperftools:*

gRPC

a3ae8e0

2021-06-07

cpe:2.3:a:grpc:grpc:*

HTTP Parser

4f15b7d

2020-07-10

cpe:2.3:a:nodejs:node.js:*

libcircllhist

63a16dd

2019-02-11

libevent

62c152d

2020-07-28

cpe:2.3:a:libevent_project:libevent:*

Nghttp2

1.42.0

2020-11-23

cpe:2.3:a:nghttp2:nghttp2:*

nlohmann JSON

3.9.1

2020-08-06

cpe:2.3:a:json_project:json:*

Protocol Buffers

3.16.0

2021-05-07

cpe:2.3:a:google:protobuf:*

QUICHE

aee86fb

2021-06-02

RapidJSON

dfbe1db

2019-12-03

cpe:2.3:a:tencent:rapidjson:*

RE2

2020-07-06

2020-07-06

spdlog

1.7.0

2020-07-09

tcmalloc

9f38535

2020-11-04

xxHash

0.7.3

2020-03-05

yaml-cpp

98acc5a

2020-07-27

cpe:2.3:a:yaml-cpp_project:yaml-cpp:*

zlib

79baebe

2019-04-14

cpe:2.3:a:gnu:zlib:*

zlib-ng

b802a30

2020-10-18

Data plane (extensions)

envoy.access_loggers.wasm

Name

Version

Release date

CPE

ANTLR Rules for Bazel

3cc2f95

2019-06-21

ANTLR v4

4.7.2

2018-12-18

Common Expression Language (CEL) C++ library

0.6.1

2021-06-28

FlatBuffers

a83caf5

2020-04-02

WebAssembly for Proxies (C++ host implementation)

c9760d1

2021-07-11

WebAssembly for Proxies (C++ SDK)

fd0be84

2021-06-24

envoy.bootstrap.wasm

Name

Version

Release date

CPE

ANTLR Rules for Bazel

3cc2f95

2019-06-21

ANTLR v4

4.7.2

2018-12-18

Common Expression Language (CEL) C++ library

0.6.1

2021-06-28

FlatBuffers

a83caf5

2020-04-02

WebAssembly for Proxies (C++ host implementation)

c9760d1

2021-07-11

WebAssembly for Proxies (C++ SDK)

fd0be84

2021-06-24

envoy.compression.brotli.compressor

Name

Version

Release date

CPE

brotli

0cd2e39

2020-09-08

cpe:2.3:a:google:brotli:*

envoy.compression.brotli.decompressor

Name

Version

Release date

CPE

brotli

0cd2e39

2020-09-08

cpe:2.3:a:google:brotli:*

envoy.filters.http.aws_lambda

Name

Version

Release date

CPE

curl

7.77.0

2021-05-26

cpe:2.3:a:haxx:libcurl:*

envoy.filters.http.aws_request_signing

Name

Version

Release date

CPE

curl

7.77.0

2021-05-26

cpe:2.3:a:haxx:libcurl:*

envoy.filters.http.grpc_json_transcoder

Name

Version

Release date

CPE

grpc-httpjson-transcoding

f1591a4

2021-05-08

envoy.filters.http.jwt_authn

Name

Version

Release date

CPE

jwt_verify_lib

28efec2

2020-11-05

envoy.filters.http.lua

Name

Version

Release date

CPE

LuaJIT

1d8b747

2020-10-12

cpe:2.3:a:luajit:luajit:*

Moonjit

2.2.0

2020-01-14

cpe:2.3:a:moonjit_project:moonjit:*

envoy.filters.http.rbac

Name

Version

Release date

CPE

Common Expression Language (CEL) C++ library

0.6.1

2021-06-28

FlatBuffers

a83caf5

2020-04-02

envoy.filters.http.wasm

Name

Version

Release date

CPE

ANTLR Rules for Bazel

3cc2f95

2019-06-21

ANTLR v4

4.7.2

2018-12-18

Common Expression Language (CEL) C++ library

0.6.1

2021-06-28

FlatBuffers

a83caf5

2020-04-02

WebAssembly for Proxies (C++ host implementation)

c9760d1

2021-07-11

WebAssembly for Proxies (C++ SDK)

fd0be84

2021-06-24

envoy.filters.network.dubbo_proxy

Name

Version

Release date

CPE

hessian2-codec

dd8e054

2021-04-05

envoy.filters.network.kafka_broker

Name

Version

Release date

CPE

Kafka (source)

2.4.1

2020-03-03

cpe:2.3:a:apache:kafka:*

envoy.filters.network.mysql_proxy

Name

Version

Release date

CPE

C++ SQL Parser Library

3b40ba2

2020-06-10

envoy.filters.network.postgres_proxy

Name

Version

Release date

CPE

C++ SQL Parser Library

3b40ba2

2020-06-10

envoy.filters.network.rbac

Name

Version

Release date

CPE

Common Expression Language (CEL) C++ library

0.6.1

2021-06-28

FlatBuffers

a83caf5

2020-04-02

envoy.filters.network.wasm

Name

Version

Release date

CPE

ANTLR Rules for Bazel

3cc2f95

2019-06-21

ANTLR v4

4.7.2

2018-12-18

Common Expression Language (CEL) C++ library

0.6.1

2021-06-28

FlatBuffers

a83caf5

2020-04-02

WebAssembly for Proxies (C++ host implementation)

c9760d1

2021-07-11

WebAssembly for Proxies (C++ SDK)

fd0be84

2021-06-24

envoy.grpc_credentials.aws_iam

Name

Version

Release date

CPE

curl

7.77.0

2021-05-26

cpe:2.3:a:haxx:libcurl:*

envoy.rate_limit_descriptors.expr

Name

Version

Release date

CPE

ANTLR Rules for Bazel

3cc2f95

2019-06-21

ANTLR v4

4.7.2

2018-12-18

Common Expression Language (CEL) C++ library

0.6.1

2021-06-28

FlatBuffers

a83caf5

2020-04-02

envoy.stat_sinks.wasm

Name

Version

Release date

CPE

ANTLR Rules for Bazel

3cc2f95

2019-06-21

ANTLR v4

4.7.2

2018-12-18

Common Expression Language (CEL) C++ library

0.6.1

2021-06-28

FlatBuffers

a83caf5

2020-04-02

WebAssembly for Proxies (C++ host implementation)

c9760d1

2021-07-11

WebAssembly for Proxies (C++ SDK)

fd0be84

2021-06-24

envoy.tracers.opencensus

Name

Version

Release date

CPE

curl

7.77.0

2021-05-26

cpe:2.3:a:haxx:libcurl:*

envoy.wasm.runtime.null

Name

Version

Release date

CPE

WebAssembly for Proxies (C++ host implementation)

c9760d1

2021-07-11

WebAssembly for Proxies (C++ SDK)

fd0be84

2021-06-24

envoy.wasm.runtime.v8

Name

Version

Release date

CPE

V8

9.2.230.13

2021-06-25

cpe:2.3:a:google:v8:*

WebAssembly for Proxies (C++ host implementation)

c9760d1

2021-07-11

WebAssembly for Proxies (C++ SDK)

fd0be84

2021-06-24

envoy.wasm.runtime.wamr

Name

Version

Release date

CPE

LLVM

10.0.0

2020-03-24

cpe:2.3:a:llvm:*:*

WebAssembly for Proxies (C++ host implementation)

c9760d1

2021-07-11

WebAssembly for Proxies (C++ SDK)

fd0be84

2021-06-24

Webassembly Micro Runtime

b554a9d

2021-07-06

envoy.wasm.runtime.wasmtime

Name

Version

Release date

CPE

Bazel rust rules

7e7246f

2021-06-29

wasm-c-api

c9d3128

2021-01-11

wasmtime

0.26.0

2021-04-05

WebAssembly for Proxies (C++ host implementation)

c9760d1

2021-07-11

WebAssembly for Proxies (C++ SDK)

fd0be84

2021-06-24

envoy.wasm.runtime.wavm

Name

Version

Release date

CPE

LLVM

10.0.0

2020-03-24

cpe:2.3:a:llvm:*:*

WAVM

79c3aa2

2021-03-31

cpe:2.3:a:webassembly_virtual_machine_project:webassembly_virtual_machine:*

WebAssembly for Proxies (C++ host implementation)

c9760d1

2021-07-11

WebAssembly for Proxies (C++ SDK)

fd0be84

2021-06-24

Control plane

Name

Version

Release date

CPE

Abseil

17c954d

2021-06-03

BoringSSL

75edea1

2021-05-13

cpe:2.3:a:google:boringssl:*

BoringSSL (FIPS)

fips-20190808

2019-08-08

cpe:2.3:a:google:boringssl:*

c-ares

1.17.1

2020-11-19

cpe:2.3:a:c-ares_project:c-ares:*

fmt

7.0.3

2020-08-07

cpe:2.3:a:fmt:fmt:*

gperftools

2.8

2020-07-06

cpe:2.3:a:gperftools_project:gperftools:*

gRPC

a3ae8e0

2021-06-07

cpe:2.3:a:grpc:grpc:*

HTTP Parser

4f15b7d

2020-07-10

cpe:2.3:a:nodejs:node.js:*

libcircllhist

63a16dd

2019-02-11

libevent

62c152d

2020-07-28

cpe:2.3:a:libevent_project:libevent:*

Nghttp2

1.42.0

2020-11-23

cpe:2.3:a:nghttp2:nghttp2:*

nlohmann JSON

3.9.1

2020-08-06

cpe:2.3:a:json_project:json:*

Protocol Buffers

3.16.0

2021-05-07

cpe:2.3:a:google:protobuf:*

RapidJSON

dfbe1db

2019-12-03

cpe:2.3:a:tencent:rapidjson:*

RE2

2020-07-06

2020-07-06

spdlog

1.7.0

2020-07-09

tcmalloc

9f38535

2020-11-04

upb

de76b31

2020-12-29

xxHash

0.7.3

2020-03-05

yaml-cpp

98acc5a

2020-07-27

cpe:2.3:a:yaml-cpp_project:yaml-cpp:*

zlib

79baebe

2019-04-14

cpe:2.3:a:gnu:zlib:*

zlib-ng

b802a30

2020-10-18

API

Name

Version

Release date

CPE

Bazel build tools

4.0.1

2021-03-01

bazel-skylib

1.0.3

2020-08-27

Go rules for Bazel

0.27.0

2021-03-17

Google APIs

82944da

2019-12-02

OpenCensus Proto

0.3.0

2020-07-21

OpenTelemetry Proto

0.9.0

2021-05-12

Prometheus client model

147c58e

2021-06-07

Protobuf Rules for Bazel

f7a30f6

2021-02-09

protoc-gen-validate (PGV)

0.6.1

2021-04-26

xDS API

b88cc78

2021-03-23

Zipkin API

1.0.0

2020-11-22

Observability (core)

Name

Version

Release date

CPE

libcircllhist

63a16dd

2019-02-11

Observability (extensions)

envoy.filters.http.aws_lambda

Name

Version

Release date

CPE

curl

7.77.0

2021-05-26

cpe:2.3:a:haxx:libcurl:*

envoy.filters.http.aws_request_signing

Name

Version

Release date

CPE

curl

7.77.0

2021-05-26

cpe:2.3:a:haxx:libcurl:*

envoy.grpc_credentials.aws_iam

Name

Version

Release date

CPE

curl

7.77.0

2021-05-26

cpe:2.3:a:haxx:libcurl:*

envoy.tracers.datadog

Name

Version

Release date

CPE

Datadog OpenTracing C++ Client

1.2.1

2021-01-27

msgpack for C/C++

3.3.0

2020-06-05

OpenTracing

1.5.1

2019-01-16

envoy.tracers.dynamic_ot

Name

Version

Release date

CPE

OpenTracing

1.5.1

2019-01-16

envoy.tracers.lightstep

Name

Version

Release date

CPE

lightstep-tracer-cpp

1942b3f

2020-08-25

OpenTracing

1.5.1

2019-01-16

envoy.tracers.opencensus

Name

Version

Release date

CPE

curl

7.77.0

2021-05-26

cpe:2.3:a:haxx:libcurl:*

OpenCensus C++

ba63106

2020-10-08

envoy.tracers.skywalking

Name

Version

Release date

CPE

cpp2sky

0.3.1

2021-06-17

skywalking-data-collect-protocol

8.6.0

2021-06-07

Build

Name

Version

Release date

CPE

Apple Rules for Bazel

0.31.2

2021-05-07

bazel-compilation-database

0.4.5

2020-08-01

bazel-toolchains

4.1.0

2021-05-21

C++ rules for Bazel

b1c40e1

2020-11-11

Emscripten SDK

2.0.7

2020-10-13

envoy-build-tools

a955a00

2021-05-25

Gazelle

0.22.2

2020-10-02

Go rules for Bazel

0.27.0

2021-03-17

Packaging rules for Bazel

0.4.0

2021-03-03

Python rules for Bazel

0.1.0

2020-10-15

Rules for using foreign build systems in Bazel

d54c78a

2020-10-26

Miscellaneous

Name

Version

Release date

CPE

Six

1.12.0

2018-12-10

su-exec

212b751

2019-09-18

tclap

1-2-1

2011-04-16

Test only

Below we provide the status of the C/C++ dependencies that are only used in tests. Tests also include additional Java, Rust and Python dependencies that are not tracked below.

Name

Version

Release date

CPE

Benchmark

1.5.1

2020-06-09

compiler-rt

11.0.1

2021-01-06

Fuzzing Rules for Bazel

0.1.3

2021-04-01

Google Test

a4ab0ab

2020-09-10

Kafka (Python client)

2.0.1

2020-09-30

Kafka (server binary)

2.4.1

2020-03-12

libprotobuf-mutator

1.0

2020-11-13

twitter.common.finagle-thrift

0.3.9

2016-10-17

twitter.common.lang (Thrift)

0.3.9

2016-10-17

twitter.common.rpc (Thrift)

0.3.9

2016-10-17

WebAssembly for Proxies (Rust SDK)

4f79a79

2021-07-01