External dependencies

Below we enumerate the external dependencies that may be linked into the Envoy binary. We exclude dependencies that only are used in CI or developer tooling above.

Data plane (extensions)

envoy.access_loggers.extension_filters.cel

Name

Version

Release date

CPE

ANTLR Rules for Bazel

3cc2f95

2019-06-21

ANTLR v4

4.7.2

2018-12-18

Common Expression Language (CEL) C++ library

60c7aea

2021-11-08

FlatBuffers

2.0.0

2021-05-10

cpe:2.3:a:google:flatbuffers:*

envoy.compression.brotli.compressor

Name

Version

Release date

CPE

brotli

0cd2e39

2020-09-08

cpe:2.3:a:google:brotli:*

envoy.compression.brotli.decompressor

Name

Version

Release date

CPE

brotli

0cd2e39

2020-09-08

cpe:2.3:a:google:brotli:*

envoy.compression.zstd.compressor

Name

Version

Release date

CPE

zstd

1.5.2

2022-01-20

cpe:2.3:a:facebook:zstandard:*

envoy.compression.zstd.decompressor

Name

Version

Release date

CPE

zstd

1.5.2

2022-01-20

cpe:2.3:a:facebook:zstandard:*

envoy.filters.http.aws_lambda

Name

Version

Release date

CPE

curl

7.86.0

2022-10-26

cpe:2.3:a:haxx:libcurl:*

envoy.filters.http.aws_request_signing

Name

Version

Release date

CPE

curl

7.86.0

2022-10-26

cpe:2.3:a:haxx:libcurl:*

envoy.filters.http.grpc_json_transcoder

Name

Version

Release date

CPE

grpc-httpjson-transcoding

9e2a4b5

2022-01-06

envoy.filters.http.jwt_authn

Name

Version

Release date

CPE

jwt_verify_lib

e5d6cf7

2021-03-05

envoy.filters.http.language

Name

Version

Release date

CPE

ICU Library

70-1

2021-10-28

envoy.filters.http.lua

Name

Version

Release date

CPE

LuaJIT

1d8b747

2020-10-12

cpe:2.3:a:luajit:luajit:*

Moonjit

2.2.0

2020-01-14

cpe:2.3:a:moonjit_project:moonjit:*

envoy.filters.http.rbac

Name

Version

Release date

CPE

Common Expression Language (CEL) C++ library

60c7aea

2021-11-08

FlatBuffers

2.0.0

2021-05-10

cpe:2.3:a:google:flatbuffers:*

envoy.filters.network.dubbo_proxy

Name

Version

Release date

CPE

hessian2-codec

dd8e054

2021-04-05

envoy.filters.network.kafka_broker

Name

Version

Release date

CPE

Kafka (source)

3.4.0

2023-01-31

cpe:2.3:a:apache:kafka:*

envoy.filters.network.kafka_mesh

Name

Version

Release date

CPE

Kafka (C/C++ client)

1.8.2

2021-10-18

Kafka (source)

3.4.0

2023-01-31

cpe:2.3:a:apache:kafka:*

envoy.filters.network.mysql_proxy

Name

Version

Release date

CPE

C++ SQL Parser Library

3b40ba2

2020-06-10

envoy.filters.network.postgres_proxy

Name

Version

Release date

CPE

C++ SQL Parser Library

3b40ba2

2020-06-10

envoy.filters.network.rbac

Name

Version

Release date

CPE

Common Expression Language (CEL) C++ library

60c7aea

2021-11-08

FlatBuffers

2.0.0

2021-05-10

cpe:2.3:a:google:flatbuffers:*

envoy.grpc_credentials.aws_iam

Name

Version

Release date

CPE

curl

7.86.0

2022-10-26

cpe:2.3:a:haxx:libcurl:*

envoy.rate_limit_descriptors.expr

Name

Version

Release date

CPE

ANTLR Rules for Bazel

3cc2f95

2019-06-21

ANTLR v4

4.7.2

2018-12-18

Common Expression Language (CEL) C++ library

60c7aea

2021-11-08

FlatBuffers

2.0.0

2021-05-10

cpe:2.3:a:google:flatbuffers:*

envoy.rbac.matchers.upstream_ip_port

Name

Version

Release date

CPE

Common Expression Language (CEL) C++ library

60c7aea

2021-11-08

FlatBuffers

2.0.0

2021-05-10

cpe:2.3:a:google:flatbuffers:*

envoy.tls.key_providers.cryptomb

Name

Version

Release date

CPE

libipp-crypto

2021.5

2021-12-21

cpe:2.3:a:intel:cryptography_for_intel_integrated_performance_primitives:*

envoy.tracers.opencensus

Name

Version

Release date

CPE

curl

7.86.0

2022-10-26

cpe:2.3:a:haxx:libcurl:*

envoy.wasm.runtime.null

Name

Version

Release date

CPE

WebAssembly for Proxies (C++ host implementation)

624ef2e

2022-11-22

WebAssembly for Proxies (C++ SDK)

e30535b

2022-03-15

envoy.wasm.runtime.wasmtime

Name

Version

Release date

CPE

Bazel rust rules

0.8.1

2022-07-26

wasm-c-api

c9d3128

2021-01-11

wasmtime

2.0.2

2022-11-10

cpe:2.3:a:bytecodealliance:wasmtime:*

WebAssembly for Proxies (C++ host implementation)

624ef2e

2022-11-22

WebAssembly for Proxies (C++ SDK)

e30535b

2022-03-15

API

Name

Version

Release date

CPE

bazel-skylib

1.2.1

2022-03-10

buf

1.3.1

2022-03-31

Go rules for Bazel

0.31.0

2022-03-21

Google APIs

82944da

2019-12-02

OpenCensus Proto

0.3.0

2022-09-22

OpenTelemetry Proto

0.11.0

2021-10-07

Prometheus client model

147c58e

2021-06-07

Protobuf Rules for Bazel

4.0.0

2021-09-15

protoc-gen-validate (PGV)

0.6.7

2022-03-04

xDS API

7f1daf1

2022-03-14

Zipkin API

1.0.0

2020-11-22

Observability (core)

Name

Version

Release date

CPE

libcircllhist

63a16dd

2019-02-11

Observability (extensions)

envoy.filters.http.aws_lambda

Name

Version

Release date

CPE

curl

7.86.0

2022-10-26

cpe:2.3:a:haxx:libcurl:*

envoy.filters.http.aws_request_signing

Name

Version

Release date

CPE

curl

7.86.0

2022-10-26

cpe:2.3:a:haxx:libcurl:*

envoy.grpc_credentials.aws_iam

Name

Version

Release date

CPE

curl

7.86.0

2022-10-26

cpe:2.3:a:haxx:libcurl:*

envoy.tracers.datadog

Name

Version

Release date

CPE

Datadog OpenTracing C++ Client

1.2.1

2021-01-27

msgpack for C/C++

3.3.0

2020-06-05

OpenTracing

1.5.1

2019-01-16

envoy.tracers.dynamic_ot

Name

Version

Release date

CPE

OpenTracing

1.5.1

2019-01-16

envoy.tracers.lightstep

Name

Version

Release date

CPE

lightstep-tracer-cpp

1942b3f

2020-08-25

OpenTracing

1.5.1

2019-01-16

envoy.tracers.opencensus

Name

Version

Release date

CPE

curl

7.86.0

2022-10-26

cpe:2.3:a:haxx:libcurl:*

OpenCensus C++

ba63106

2020-10-08

RapidJSON

dfbe1db

2019-12-03

cpe:2.3:a:tencent:rapidjson:*

envoy.tracers.skywalking

Name

Version

Release date

CPE

cpp2sky

0.3.1

2021-06-17

skywalking-data-collect-protocol

8.9.1

2021-12-11

cpe:2.3:a:apache:skywalking:*

envoy.tracers.zipkin

Name

Version

Release date

CPE

RapidJSON

dfbe1db

2019-12-03

cpe:2.3:a:tencent:rapidjson:*

Miscellaneous

Name

Version

Release date

CPE

su-exec

212b751

2019-09-18

tclap

1.2.5

2021-11-01

cpe:2.3:a:tclap_project:tclap:*

envoy.bootstrap.vcl

Name

Version

Release date

CPE

VPP Comms Library

fe6d8a3

2022-03-02

envoy.filters.http.sxg

Name

Version

Release date

CPE

libsxg

beaa393

2021-07-08

Test only

Below we provide the status of the C/C++ dependencies that are only used in tests. Tests also include additional Java, Rust and Python dependencies that are not tracked below.

Name

Version

Release date

CPE

Benchmark

1.6.1

2022-01-10

compiler-rt

12.0.1

2021-07-09

cpe:2.3:a:llvm:compiler-rt:*

Emscripten SDK

0ea8f8a

2022-03-09

Fuzzing Rules for Bazel

0.3.1

2022-01-24

Google Test

a4ab0ab

2020-09-10

cpe:2.3:a:google:google_test:*

Kafka (Python client)

2.0.2

2020-09-30

Kafka (server binary)

3.4.0

2023-01-31

libprotobuf-mutator

1.0

2020-11-13

WebAssembly for Proxies (Rust SDK)

0.2.1

2022-11-22