External dependencies

Below we enumerate the external dependencies that may be linked into the Envoy binary. We exclude dependencies that only are used in CI or developer tooling above.

Data plane (core)

External dependencies: dataplane_core

Name	Version	Release date	CPE	License
Abseil	20260107.1	2026-02-11		Apache-2.0
BoringSSL	0.20260508.0	2026-04-14	cpe:2.3:a:google:boringssl:*	Mixed
C++ rules for Bazel	0.2.22	2026-07-07		Apache-2.0
c-ares	1.34.6	2026-07-07	cpe:2.3:a:c-ares_project:c-ares:*	c-ares
Chrome URL parsing library	0.0.0-221103-dd4080f.envoy	2022-11-03		BSD-3-Clause
envoy_toolshed	0.4.13.envoy	2026-09-03		Apache-2.0
fmt	12.1.0	2026-06-16	cpe:2.3:a:fmt:fmt:*	fmt
gperftools	2.17.2	2026-03-06	cpe:2.3:a:gperftools_project:gperftools:*	BSD-3-Clause
gRPC	1.83.0.envoy	2026-07-22	cpe:2.3:a:grpc:grpc:*	Apache-2.0
Java rules for Bazel	9.3.0	2026-07-15		Apache-2.0
jemalloc	5.3.0-bcr.4	2022-05-06		BSD-2-Clause
libcircllhist	0.3.2.envoy	2021-06-08		Apache-2.0
libevent	2.2.2-alpha.envoy	2026-07-01	cpe:2.3:a:libevent_project:libevent:*	BSD-3-Clause
liburing	2.13.envoy	2026-06-29
LLVM toolchain for Bazel	1.8.0.envoy	2026-08-29		Apache-2.0
Nghttp2	1.66.0.envoy	2025-06-17	cpe:2.3:a:nghttp2:nghttp2:*	MIT
nlohmann JSON	3.12.0	2025-04-11	cpe:2.3:a:json-for-modern-cpp_project:json-for-modern-cpp:*	MIT
OpenSSL	3.5.7.envoy	2026-06-09	cpe:2.3:a:openssl:openssl:*	Apache-2.0
Perfetto	53.0.envoy	2026-07-07		Apache-2.0
Protocol Buffers	35.1.bcr.envoy	2026-06-11	cpe:2.3:a:google:protobuf:*	Protocol Buffers
Python rules for Bazel	2.2.0	2026-07-04		Apache-2.0
QUICHE	0.0.0-260824-0140828.envoy	2026-08-31		BSD-3-Clause
RE2	2025-08-12.bcr.1	2024-07-01		BSD-3-Clause
Rules for using foreign build systems in Bazel	0.15.1	2025-06-24		Apache-2.0
rules_license	1.0.0	2024-09-05		Apache-2.0
Shell script rules for Bazel	0.8.0	2026-04-15		Apache-2.0
spdlog	1.16.0	2026-01-04		MIT
tcmalloc	0.0.0-20241022-5da4a88.envoy	2025-09-26		Apache-2.0
xxHash	0.8.3	2024-12-30		BSD-2-Clause
yaml-cpp	0.8.0	2026-02-04	cpe:2.3:a:yaml-cpp_project:yaml-cpp:*	MIT
zlib-ng	2.3.2.envoy	2025-12-02		zlib

envoy.compression.brotli.compressor

Name	Version	Release date	CPE	License
brotli	1.2.0	2025-10-27	cpe:2.3:a:google:brotli:*	MIT

envoy.compression.brotli.decompressor

Name	Version	Release date	CPE	License
brotli	1.2.0	2025-10-27	cpe:2.3:a:google:brotli:*	MIT

envoy.filters.http.grpc_field_extraction

Name	Version	Release date	CPE	License
proto-converter	0.0.0-20240625-1db7653.envoy	2024-06-25		Apache-2.0

envoy.filters.http.grpc_json_reverse_transcoder

Name	Version	Release date	CPE	License
proto-converter	0.0.0-20240625-1db7653.envoy	2024-06-25		Apache-2.0

envoy.filters.http.grpc_json_transcoder

Name	Version	Release date	CPE	License
proto-converter	0.0.0-20240625-1db7653.envoy	2024-06-25		Apache-2.0

envoy.filters.http.proto_api_scrubber

Name	Version	Release date	CPE	License
proto-converter	0.0.0-20240625-1db7653.envoy	2024-06-25		Apache-2.0

envoy.filters.http.proto_message_extraction

Name	Version	Release date	CPE	License
proto-converter	0.0.0-20240625-1db7653.envoy	2024-06-25		Apache-2.0

envoy.network.dns_resolver.hickory

Name	Version	Release date	CPE	License
Bazel rust rules	0.69.0.envoy	2026-02-26		Apache-2.0

envoy.wasm.runtime.wasmtime

Name	Version	Release date	CPE	License
Bazel rust rules	0.69.0.envoy	2026-02-26		Apache-2.0

Data plane (extensions)

External dependencies: dataplane_ext

Name	Version	Release date	CPE	License
Java rules for Bazel	9.3.0	2026-07-15		Apache-2.0
LLVM toolchain for Bazel	1.8.0.envoy	2026-08-29		Apache-2.0
Shell script rules for Bazel	0.8.0	2026-04-15		Apache-2.0
Wuffs	0.4.0-alpha.9.envoy	2024-09-14		Apache-2.0

envoy.access_loggers.extension_filters.cel

Name	Version	Release date	CPE	License
Common Expression Language (CEL) C++ library	0.14.0.envoy	2025-11-17		Apache-2.0
FlatBuffers	25.12.19.envoy	2025-12-19	cpe:2.3:a:google:flatbuffers:*	Apache-2.0

envoy.access_loggers.wasm

Name	Version	Release date	CPE	License
Common Expression Language (CEL) C++ library	0.14.0.envoy	2025-11-17		Apache-2.0
FlatBuffers	25.12.19.envoy	2025-12-19	cpe:2.3:a:google:flatbuffers:*	Apache-2.0
WebAssembly for Proxies (C++ host implementation)	0.0.0-260704-f2db56a.envoy	2026-06-23		Apache-2.0
WebAssembly for Proxies (C++ SDK)	0.0.0-250925-e5256b0.envoy	2025-09-25		Apache-2.0

envoy.bootstrap.wasm

Name	Version	Release date	CPE	License
Common Expression Language (CEL) C++ library	0.14.0.envoy	2025-11-17		Apache-2.0
FlatBuffers	25.12.19.envoy	2025-12-19	cpe:2.3:a:google:flatbuffers:*	Apache-2.0
WebAssembly for Proxies (C++ host implementation)	0.0.0-260704-f2db56a.envoy	2026-06-23		Apache-2.0
WebAssembly for Proxies (C++ SDK)	0.0.0-250925-e5256b0.envoy	2025-09-25		Apache-2.0

envoy.compression.brotli.compressor

Name	Version	Release date	CPE	License
brotli	1.2.0	2025-10-27	cpe:2.3:a:google:brotli:*	MIT

envoy.compression.brotli.decompressor

Name	Version	Release date	CPE	License
brotli	1.2.0	2025-10-27	cpe:2.3:a:google:brotli:*	MIT

envoy.compression.qatzip.compressor

Name	Version	Release date	CPE	License
LZ4	1.10.0.bcr.2.envoy	2024-07-22
numactl	2.0.19	2024-10-24		LGPL-2.1
qatlib	25.08.0.envoy	2026-02-06		BSD-3-Clause
qatzip	1.3.1.envoy	2026-02-18		BSD-3-Clause

envoy.compression.qatzstd.compressor

Name	Version	Release date	CPE	License
numactl	2.0.19	2024-10-24		LGPL-2.1
QAT-ZSTD-Plugin	1.0.0.envoy	2025-10-07
qatlib	25.08.0.envoy	2026-02-06		BSD-3-Clause

envoy.compression.zstd.compressor

Name	Version	Release date	CPE	License
zstd	1.5.7	2025-02-19	cpe:2.3:a:facebook:zstandard:*

envoy.compression.zstd.decompressor

Name	Version	Release date	CPE	License
zstd	1.5.7	2025-02-19	cpe:2.3:a:facebook:zstandard:*

envoy.extensions.network.socket_interface.sockmap

Name	Version	Release date	CPE	License
elfutils	0.195.envoy	2026-04-15		LGPL-3.0-or-later OR GPL-2.0-or-later
libbpf	1.7.0.envoy	2026-03-16		LGPL-2.1-only OR BSD-2-Clause

envoy.filters.http.ext_proc

Name	Version	Release date	CPE	License
Common Expression Language (CEL) C++ library	0.14.0.envoy	2025-11-17		Apache-2.0
FlatBuffers	25.12.19.envoy	2025-12-19	cpe:2.3:a:google:flatbuffers:*	Apache-2.0

envoy.filters.http.grpc_field_extraction

Name	Version	Release date	CPE	License
grpc-httpjson-transcoding	0.0.0-20250507-a6e226f.envoy	2025-05-07		Apache-2.0
ocp	0.0.0-230505-e965ac0.envoy	2023-05-05		Apache-2.0
proto-converter	0.0.0-20240625-1db7653.envoy	2024-06-25		Apache-2.0
proto-field-extraction	0.0.0-240710-d5d39f0.envoy	2024-07-10		Apache-2.0

envoy.filters.http.grpc_json_reverse_transcoder

Name	Version	Release date	CPE	License
grpc-httpjson-transcoding	0.0.0-20250507-a6e226f.envoy	2025-05-07		Apache-2.0
proto-converter	0.0.0-20240625-1db7653.envoy	2024-06-25		Apache-2.0

envoy.filters.http.grpc_json_transcoder

Name	Version	Release date	CPE	License
grpc-httpjson-transcoding	0.0.0-20250507-a6e226f.envoy	2025-05-07		Apache-2.0
proto-converter	0.0.0-20240625-1db7653.envoy	2024-06-25		Apache-2.0

envoy.filters.http.language

Name	Version	Release date	CPE	License
ICU Library	78.2.envoy	2026-01-09		ICU

envoy.filters.http.lua

Name	Version	Release date	CPE	License
LuaJIT	0.0.0-260126-871db2c.envoy	2025-07-24	cpe:2.3:a:luajit:luajit:*	MIT

envoy.filters.http.mcp

Name	Version	Release date	CPE	License
grpc-httpjson-transcoding	0.0.0-20250507-a6e226f.envoy	2025-05-07		Apache-2.0

envoy.filters.http.proto_api_scrubber

Name	Version	Release date	CPE	License
grpc-httpjson-transcoding	0.0.0-20250507-a6e226f.envoy	2025-05-07		Apache-2.0
ocp	0.0.0-230505-e965ac0.envoy	2023-05-05		Apache-2.0
proto-converter	0.0.0-20240625-1db7653.envoy	2024-06-25		Apache-2.0
proto-field-extraction	0.0.0-240710-d5d39f0.envoy	2024-07-10		Apache-2.0
proto-processing	0.0.0-250110-279353c.envoy	2025-01-10		Apache-2.0

envoy.filters.http.proto_message_extraction

Name	Version	Release date	CPE	License
grpc-httpjson-transcoding	0.0.0-20250507-a6e226f.envoy	2025-05-07		Apache-2.0
ocp	0.0.0-230505-e965ac0.envoy	2023-05-05		Apache-2.0
proto-converter	0.0.0-20240625-1db7653.envoy	2024-06-25		Apache-2.0
proto-field-extraction	0.0.0-240710-d5d39f0.envoy	2024-07-10		Apache-2.0
proto-processing	0.0.0-250110-279353c.envoy	2025-01-10		Apache-2.0

envoy.filters.http.rate_limit_quota

Name	Version	Release date	CPE	License
Common Expression Language (CEL) C++ library	0.14.0.envoy	2025-11-17		Apache-2.0
FlatBuffers	25.12.19.envoy	2025-12-19	cpe:2.3:a:google:flatbuffers:*	Apache-2.0

envoy.filters.http.rbac

Name	Version	Release date	CPE	License
Common Expression Language (CEL) C++ library	0.14.0.envoy	2025-11-17		Apache-2.0
FlatBuffers	25.12.19.envoy	2025-12-19	cpe:2.3:a:google:flatbuffers:*	Apache-2.0

envoy.filters.http.upstream_rbac

Name	Version	Release date	CPE	License
Common Expression Language (CEL) C++ library	0.14.0.envoy	2025-11-17		Apache-2.0
FlatBuffers	25.12.19.envoy	2025-12-19	cpe:2.3:a:google:flatbuffers:*	Apache-2.0

envoy.filters.http.wasm

Name	Version	Release date	CPE	License
Common Expression Language (CEL) C++ library	0.14.0.envoy	2025-11-17		Apache-2.0
FlatBuffers	25.12.19.envoy	2025-12-19	cpe:2.3:a:google:flatbuffers:*	Apache-2.0
WebAssembly for Proxies (C++ host implementation)	0.0.0-260704-f2db56a.envoy	2026-06-23		Apache-2.0
WebAssembly for Proxies (C++ SDK)	0.0.0-250925-e5256b0.envoy	2025-09-25		Apache-2.0

envoy.filters.network.dubbo_proxy

Name	Version	Release date	CPE	License
hessian2-codec	0.0.0-250114-6f5a647.envoy	2025-01-14		Apache-2.0

envoy.filters.network.ext_proc

Name	Version	Release date	CPE	License
Common Expression Language (CEL) C++ library	0.14.0.envoy	2025-11-17		Apache-2.0
FlatBuffers	25.12.19.envoy	2025-12-19	cpe:2.3:a:google:flatbuffers:*	Apache-2.0

envoy.filters.network.generic_proxy

Name	Version	Release date	CPE	License
hessian2-codec	0.0.0-250114-6f5a647.envoy	2025-01-14		Apache-2.0

envoy.filters.network.kafka_broker

Name	Version	Release date	CPE	License
Kafka (source)	3.9.1.envoy	2026-02-07	cpe:2.3:a:apache:kafka:*	Apache-2.0

envoy.filters.network.kafka_mesh

Name	Version	Release date	CPE	License
Kafka (C/C++ client)	2.6.0.envoy	2024-10-10		librdkafka
Kafka (source)	3.9.1.envoy	2026-02-07	cpe:2.3:a:apache:kafka:*	Apache-2.0

envoy.filters.network.mysql_proxy

Name	Version	Release date	CPE	License
C++ SQL Parser Library	0.0.0-260715-52e5ad1.envoy	2026-07-15		MIT

envoy.filters.network.postgres_proxy

Name	Version	Release date	CPE	License
C++ SQL Parser Library	0.0.0-260715-52e5ad1.envoy	2026-07-15		MIT

envoy.filters.network.rbac

Name	Version	Release date	CPE	License
Common Expression Language (CEL) C++ library	0.14.0.envoy	2025-11-17		Apache-2.0
FlatBuffers	25.12.19.envoy	2025-12-19	cpe:2.3:a:google:flatbuffers:*	Apache-2.0

envoy.filters.network.wasm

Name	Version	Release date	CPE	License
Common Expression Language (CEL) C++ library	0.14.0.envoy	2025-11-17		Apache-2.0
FlatBuffers	25.12.19.envoy	2025-12-19	cpe:2.3:a:google:flatbuffers:*	Apache-2.0
WebAssembly for Proxies (C++ host implementation)	0.0.0-260704-f2db56a.envoy	2026-06-23		Apache-2.0
WebAssembly for Proxies (C++ SDK)	0.0.0-250925-e5256b0.envoy	2025-09-25		Apache-2.0

envoy.formatter.cel

Name	Version	Release date	CPE	License
Common Expression Language (CEL) C++ library	0.14.0.envoy	2025-11-17		Apache-2.0
FlatBuffers	25.12.19.envoy	2025-12-19	cpe:2.3:a:google:flatbuffers:*	Apache-2.0

envoy.generic_proxy.codecs.dubbo

Name	Version	Release date	CPE	License
hessian2-codec	0.0.0-250114-6f5a647.envoy	2025-01-14		Apache-2.0

envoy.geoip_providers.maxmind

Name	Version	Release date	CPE	License
maxmind_libmaxminddb	1.12.2	2026-03-05	cpe:2.3:a:maxmind:libmaxminddb:*	Apache-2.0

envoy.http.ext_proc.processing_request_modifiers.mapped_attribute_builder

Name	Version	Release date	CPE	License
Common Expression Language (CEL) C++ library	0.14.0.envoy	2025-11-17		Apache-2.0
FlatBuffers	25.12.19.envoy	2025-12-19	cpe:2.3:a:google:flatbuffers:*	Apache-2.0

envoy.matching.input_matchers.hyperscan

Name	Version	Release date	CPE	License
Boost	1.89.0.envoy	2025-08-14	cpe:2.3:a:boost:boost:*	Boost
Colm	0.14.7-211228-2d8ba76.envoy	2021-12-28		MIT
Hyperscan	5.4.2.envoy	2023-04-19		BSD-3-Clause
Ragel	7.0.4-211228-d4577c9.envoy	2021-12-28		MIT
Vectorscan	5.4.11.envoy	2023-11-20		BSD-3-Clause

envoy.matching.inputs.cel_data_input

Name	Version	Release date	CPE	License
Common Expression Language (CEL) C++ library	0.14.0.envoy	2025-11-17		Apache-2.0
FlatBuffers	25.12.19.envoy	2025-12-19	cpe:2.3:a:google:flatbuffers:*	Apache-2.0

envoy.matching.matchers.cel_matcher

Name	Version	Release date	CPE	License
Common Expression Language (CEL) C++ library	0.14.0.envoy	2025-11-17		Apache-2.0
FlatBuffers	25.12.19.envoy	2025-12-19	cpe:2.3:a:google:flatbuffers:*	Apache-2.0

envoy.network.dns_resolver.hickory

Name	Version	Release date	CPE	License
Bazel rust rules	0.69.0.envoy	2026-02-26		Apache-2.0

envoy.rate_limit_descriptors.expr

Name	Version	Release date	CPE	License
Common Expression Language (CEL) C++ library	0.14.0.envoy	2025-11-17		Apache-2.0
FlatBuffers	25.12.19.envoy	2025-12-19	cpe:2.3:a:google:flatbuffers:*	Apache-2.0

envoy.regex_engines.hyperscan

Name	Version	Release date	CPE	License
Boost	1.89.0.envoy	2025-08-14	cpe:2.3:a:boost:boost:*	Boost
Colm	0.14.7-211228-2d8ba76.envoy	2021-12-28		MIT
Hyperscan	5.4.2.envoy	2023-04-19		BSD-3-Clause
Ragel	7.0.4-211228-d4577c9.envoy	2021-12-28		MIT
Vectorscan	5.4.11.envoy	2023-11-20		BSD-3-Clause

envoy.router.cluster_specifier_plugin.lua

Name	Version	Release date	CPE	License
LuaJIT	0.0.0-260126-871db2c.envoy	2025-07-24	cpe:2.3:a:luajit:luajit:*	MIT

envoy.stat_sinks.wasm

Name	Version	Release date	CPE	License
Common Expression Language (CEL) C++ library	0.14.0.envoy	2025-11-17		Apache-2.0
FlatBuffers	25.12.19.envoy	2025-12-19	cpe:2.3:a:google:flatbuffers:*	Apache-2.0
WebAssembly for Proxies (C++ host implementation)	0.0.0-260704-f2db56a.envoy	2026-06-23		Apache-2.0
WebAssembly for Proxies (C++ SDK)	0.0.0-250925-e5256b0.envoy	2025-09-25		Apache-2.0

envoy.string_matcher.lua

Name	Version	Release date	CPE	License
LuaJIT	0.0.0-260126-871db2c.envoy	2025-07-24	cpe:2.3:a:luajit:luajit:*	MIT

envoy.tls.key_providers.cryptomb

Name	Version	Release date	CPE	License
libipp-crypto	1.3.0.envoy	2026-05-28	cpe:2.3:a:intel:cryptography_for_intel_integrated_performance_primitives:*	Apache-2.0

envoy.tls.key_providers.kae

Name	Version	Release date	CPE	License
uadk	2.9.envoy	2025-06-20		Apache-2.0

envoy.tls.key_providers.qat

Name	Version	Release date	CPE	License
numactl	2.0.19	2024-10-24		LGPL-2.1
qatlib	25.08.0.envoy	2026-02-06		BSD-3-Clause

envoy.tracers.opentelemetry

Name	Version	Release date	CPE	License
Common Expression Language (CEL) C++ library	0.14.0.envoy	2025-11-17		Apache-2.0
FlatBuffers	25.12.19.envoy	2025-12-19	cpe:2.3:a:google:flatbuffers:*	Apache-2.0

envoy.tracers.opentelemetry.samplers.cel

Name	Version	Release date	CPE	License
Common Expression Language (CEL) C++ library	0.14.0.envoy	2025-11-17		Apache-2.0
FlatBuffers	25.12.19.envoy	2025-12-19	cpe:2.3:a:google:flatbuffers:*	Apache-2.0

envoy.transport_sockets.alts

Name	Version	Release date	CPE	License
Protobuf and gRPC rules for Bazel	5.8.0	2023-12-14		Apache-2.0

envoy.wasm.runtime.null

Name	Version	Release date	CPE	License
WebAssembly for Proxies (C++ host implementation)	0.0.0-260704-f2db56a.envoy	2026-06-23		Apache-2.0
WebAssembly for Proxies (C++ SDK)	0.0.0-250925-e5256b0.envoy	2025-09-25		Apache-2.0

envoy.wasm.runtime.v8

Name	Version	Release date	CPE	License
Conversion to/from half-precision floating point formats	0.0.0-260704-3d2de18.envoy	2025-08-16
Dragonbox	0.0.0-241028-6c7c925.envoy	2024-10-28
Efficient and performance-portable vector software	1.2.0	2024-05-31
fast_float number parsing library	8.0.2	2024-11-21
Unicode validation and transcoding at billions of characters per second	8.1.0.envoy	2026-03-07
V8	14.6.202.10.envoy	2026-03-04	cpe:2.3:a:google:v8:*
WebAssembly for Proxies (C++ host implementation)	0.0.0-260704-f2db56a.envoy	2026-06-23		Apache-2.0
WebAssembly for Proxies (C++ SDK)	0.0.0-250925-e5256b0.envoy	2025-09-25		Apache-2.0

envoy.wasm.runtime.wamr

Name	Version	Release date	CPE	License
WebAssembly for Proxies (C++ host implementation)	0.0.0-260704-f2db56a.envoy	2026-06-23		Apache-2.0
WebAssembly for Proxies (C++ SDK)	0.0.0-250925-e5256b0.envoy	2025-09-25		Apache-2.0
Webassembly Micro Runtime	2.4.4.envoy	2025-11-24		Apache-2.0

envoy.wasm.runtime.wasmtime

Name	Version	Release date	CPE	License
Bazel rust rules	0.69.0.envoy	2026-02-26		Apache-2.0
wasmtime	45.0.2.envoy	2026-06-15	cpe:2.3:a:bytecodealliance:wasmtime:*	Apache-2.0
WebAssembly for Proxies (C++ host implementation)	0.0.0-260704-f2db56a.envoy	2026-06-23		Apache-2.0
WebAssembly for Proxies (C++ SDK)	0.0.0-250925-e5256b0.envoy	2025-09-25		Apache-2.0

Control plane

External dependencies: controlplane

Name	Version	Release date	CPE	License
Abseil	20260107.1	2026-02-11		Apache-2.0
BoringSSL	0.20260508.0	2026-04-14	cpe:2.3:a:google:boringssl:*	Mixed
C++ rules for Bazel	0.2.22	2026-07-07		Apache-2.0
c-ares	1.34.6	2026-07-07	cpe:2.3:a:c-ares_project:c-ares:*	c-ares
Chrome URL parsing library	0.0.0-221103-dd4080f.envoy	2022-11-03		BSD-3-Clause
envoy_toolshed	0.4.13.envoy	2026-09-03		Apache-2.0
fmt	12.1.0	2026-06-16	cpe:2.3:a:fmt:fmt:*	fmt
gperftools	2.17.2	2026-03-06	cpe:2.3:a:gperftools_project:gperftools:*	BSD-3-Clause
gRPC	1.83.0.envoy	2026-07-22	cpe:2.3:a:grpc:grpc:*	Apache-2.0
Java rules for Bazel	9.3.0	2026-07-15		Apache-2.0
jemalloc	5.3.0-bcr.4	2022-05-06		BSD-2-Clause
libcircllhist	0.3.2.envoy	2021-06-08		Apache-2.0
libevent	2.2.2-alpha.envoy	2026-07-01	cpe:2.3:a:libevent_project:libevent:*	BSD-3-Clause
liburing	2.13.envoy	2026-06-29
LLVM toolchain for Bazel	1.8.0.envoy	2026-08-29		Apache-2.0
Nghttp2	1.66.0.envoy	2025-06-17	cpe:2.3:a:nghttp2:nghttp2:*	MIT
nlohmann JSON	3.12.0	2025-04-11	cpe:2.3:a:json-for-modern-cpp_project:json-for-modern-cpp:*	MIT
OpenSSL	3.5.7.envoy	2026-06-09	cpe:2.3:a:openssl:openssl:*	Apache-2.0
Perfetto	53.0.envoy	2026-07-07		Apache-2.0
Protocol Buffers	35.1.bcr.envoy	2026-06-11	cpe:2.3:a:google:protobuf:*	Protocol Buffers
Python rules for Bazel	2.2.0	2026-07-04		Apache-2.0
QUICHE	0.0.0-260824-0140828.envoy	2026-08-31		BSD-3-Clause
RE2	2025-08-12.bcr.1	2024-07-01		BSD-3-Clause
Rules for using foreign build systems in Bazel	0.15.1	2025-06-24		Apache-2.0
rules_license	1.0.0	2024-09-05		Apache-2.0
Shell script rules for Bazel	0.8.0	2026-04-15		Apache-2.0
spdlog	1.16.0	2026-01-04		MIT
tcmalloc	0.0.0-20241022-5da4a88.envoy	2025-09-26		Apache-2.0
xxHash	0.8.3	2024-12-30		BSD-2-Clause
yaml-cpp	0.8.0	2026-02-04	cpe:2.3:a:yaml-cpp_project:yaml-cpp:*	MIT
zlib-ng	2.3.2.envoy	2025-12-02		zlib

envoy.filters.http.grpc_field_extraction

Name	Version	Release date	CPE	License
proto-converter	0.0.0-20240625-1db7653.envoy	2024-06-25		Apache-2.0

envoy.filters.http.grpc_json_reverse_transcoder

Name	Version	Release date	CPE	License
proto-converter	0.0.0-20240625-1db7653.envoy	2024-06-25		Apache-2.0

envoy.filters.http.grpc_json_transcoder

Name	Version	Release date	CPE	License
proto-converter	0.0.0-20240625-1db7653.envoy	2024-06-25		Apache-2.0

envoy.filters.http.proto_api_scrubber

Name	Version	Release date	CPE	License
proto-converter	0.0.0-20240625-1db7653.envoy	2024-06-25		Apache-2.0

envoy.filters.http.proto_message_extraction

Name	Version	Release date	CPE	License
proto-converter	0.0.0-20240625-1db7653.envoy	2024-06-25		Apache-2.0

envoy.network.dns_resolver.hickory

Name	Version	Release date	CPE	License
Bazel rust rules	0.69.0.envoy	2026-02-26		Apache-2.0

envoy.wasm.runtime.wasmtime

Name	Version	Release date	CPE	License
Bazel rust rules	0.69.0.envoy	2026-02-26		Apache-2.0

API

External dependencies: api

Name	Version	Release date	CPE	License
Bazel rules for Buf	0.5.2	2026-04-30		Apache-2.0
bazel-skylib	1.9.0	2026-07-17		Apache-2.0
Go rules for Bazel	0.59.0	2026-06-04		Apache-2.0
Google APIs	0.0.0-20251003-2193a2bf	2024-09-16		Apache-2.0
Java rules for Bazel	9.3.0	2026-07-15		Apache-2.0
OpenTelemetry Proto	1.8.0	2026-07-21		Apache-2.0
Prometheus client model	0.6.2.envoy	2025-04-11		Apache-2.0
Protobuf Rules for Bazel	7.1.0	2024-12-18		Apache-2.0
protoc-gen-validate (PGV)	1.3.0.envoy	2026-02-18		Apache-2.0
Shell script rules for Bazel	0.8.0	2026-04-15		Apache-2.0
xDS API	0.0.1-20251110-8bfbf64.envoy	2025-11-10		Apache-2.0
Zipkin API	1.0.0.envoy	2020-11-22		Apache-2.0

envoy.access_loggers.extension_filters.cel

Name	Version	Release date	CPE	License
CEL	0.25.2	2025-11-10		Apache-2.0

envoy.access_loggers.wasm

Name	Version	Release date	CPE	License
CEL	0.25.2	2025-11-10		Apache-2.0

envoy.bootstrap.wasm

Name	Version	Release date	CPE	License
CEL	0.25.2	2025-11-10		Apache-2.0

envoy.filters.http.ext_proc

Name	Version	Release date	CPE	License
CEL	0.25.2	2025-11-10		Apache-2.0

envoy.filters.http.rate_limit_quota

Name	Version	Release date	CPE	License
CEL	0.25.2	2025-11-10		Apache-2.0

envoy.filters.http.rbac

Name	Version	Release date	CPE	License
CEL	0.25.2	2025-11-10		Apache-2.0

envoy.filters.http.upstream_rbac

Name	Version	Release date	CPE	License
CEL	0.25.2	2025-11-10		Apache-2.0

envoy.filters.http.wasm

Name	Version	Release date	CPE	License
CEL	0.25.2	2025-11-10		Apache-2.0

envoy.filters.network.ext_proc

Name	Version	Release date	CPE	License
CEL	0.25.2	2025-11-10		Apache-2.0

envoy.filters.network.rbac

Name	Version	Release date	CPE	License
CEL	0.25.2	2025-11-10		Apache-2.0

envoy.filters.network.wasm

Name	Version	Release date	CPE	License
CEL	0.25.2	2025-11-10		Apache-2.0

envoy.formatter.cel

Name	Version	Release date	CPE	License
CEL	0.25.2	2025-11-10		Apache-2.0

envoy.http.ext_proc.processing_request_modifiers.mapped_attribute_builder

Name	Version	Release date	CPE	License
CEL	0.25.2	2025-11-10		Apache-2.0

envoy.matching.inputs.cel_data_input

Name	Version	Release date	CPE	License
CEL	0.25.2	2025-11-10		Apache-2.0

envoy.matching.matchers.cel_matcher

Name	Version	Release date	CPE	License
CEL	0.25.2	2025-11-10		Apache-2.0

envoy.rate_limit_descriptors.expr

Name	Version	Release date	CPE	License
CEL	0.25.2	2025-11-10		Apache-2.0

envoy.stat_sinks.wasm

Name	Version	Release date	CPE	License
CEL	0.25.2	2025-11-10		Apache-2.0

envoy.tracers.opentelemetry

Name	Version	Release date	CPE	License
CEL	0.25.2	2025-11-10		Apache-2.0

envoy.tracers.opentelemetry.samplers.cel

Name	Version	Release date	CPE	License
CEL	0.25.2	2025-11-10		Apache-2.0

Observability (core)

External dependencies: observability_core

Name	Version	Release date	CPE	License
libcircllhist	0.3.2.envoy	2021-06-08		Apache-2.0

Observability (extensions)

External dependencies: observability_ext

Name	Version	Release date	CPE	License
Java rules for Bazel	9.3.0	2026-07-15		Apache-2.0
Shell script rules for Bazel	0.8.0	2026-04-15		Apache-2.0

envoy.access_loggers.fluentd

Name	Version	Release date	CPE	License
msgpack for C/C++	7.0.0.envoy	2024-11-02	cpe:2.3:a:messagepack:messagepack:*	Boost

envoy.tracers.datadog

Name	Version	Release date	CPE	License
Datadog C++ Tracing Library	2.0.0.envoy	2026-06-19		Apache-2.0

envoy.tracers.fluentd

Name	Version	Release date	CPE	License
msgpack for C/C++	7.0.0.envoy	2024-11-02	cpe:2.3:a:messagepack:messagepack:*	Boost

envoy.tracers.opentelemetry

Name	Version	Release date	CPE	License
OpenTelemetry	1.24.0.envoy	2026-07-16		Apache-2.0

envoy.tracers.opentelemetry.samplers.always_on

Name	Version	Release date	CPE	License
OpenTelemetry	1.24.0.envoy	2026-07-16		Apache-2.0

envoy.tracers.opentelemetry.samplers.cel

Name	Version	Release date	CPE	License
OpenTelemetry	1.24.0.envoy	2026-07-16		Apache-2.0

envoy.tracers.opentelemetry.samplers.dynatrace

Name	Version	Release date	CPE	License
OpenTelemetry	1.24.0.envoy	2026-07-16		Apache-2.0

envoy.tracers.opentelemetry.samplers.parent_based

Name	Version	Release date	CPE	License
OpenTelemetry	1.24.0.envoy	2026-07-16		Apache-2.0

envoy.tracers.opentelemetry.samplers.trace_id_ratio_based

Name	Version	Release date	CPE	License
OpenTelemetry	1.24.0.envoy	2026-07-16		Apache-2.0

envoy.tracers.skywalking

Name	Version	Release date	CPE	License
cpp2sky	0.6.0.envoy	2024-08-21		Apache-2.0
Skywalking data collect protocol	10.3.0.envoy	2026-04-21	cpe:2.3:a:apache:skywalking:*	Apache-2.0

envoy.tracers.zipkin

Name	Version	Release date	CPE	License
OpenTelemetry	1.24.0.envoy	2026-07-16		Apache-2.0

Build

External dependencies: build

Name	Version	Release date	CPE	License
Apple Rules for Bazel	3.20.1.envoy	2025-03-14		Apache-2.0
Aspect Bazel helpers	2.22.0	2025-09-17		Apache-2.0
Bazel features	1.50.0	2026-07-06		Apache-2.0
bazel-compilation-database	0.0.0-20220906-4086479.envoy	2022-09-06		Apache-2.0
C++ rules for Bazel	0.2.22	2026-07-07		Apache-2.0
envoy_toolshed	0.4.13.envoy	2026-09-03		Apache-2.0
Gazelle	0.47.0	2025-11-07		Apache-2.0
Go rules for Bazel	0.59.0	2026-06-04		Apache-2.0
Java rules for Bazel	9.3.0	2026-07-15		Apache-2.0
Java Rules for Bazel	6.10	2026-02-04		Apache-2.0
LLVM toolchain for Bazel	1.8.0.envoy	2026-08-29		Apache-2.0
Packaging rules for Bazel	1.1.0	2025-12-03		Apache-2.0
platforms	1.0.0	2026-05-01		Apache-2.0
Python rules for Bazel	2.2.0	2026-07-04		Apache-2.0
Rules for using foreign build systems in Bazel	0.15.1	2025-06-24		Apache-2.0
rules_license	1.0.0	2024-09-05		Apache-2.0
Shell script rules for Bazel	0.8.0	2026-04-15		Apache-2.0
Shellcheck rules for bazel	0.4.0	2025-08-13		MIT
yq.bzl	0.1.1.envoy	2025-05-26		Apache-2.0

Miscellaneous

External dependencies: other

Name	Version	Release date	CPE	License
Java rules for Bazel	9.3.0	2026-07-15		Apache-2.0
Shell script rules for Bazel	0.8.0	2026-04-15		Apache-2.0
su-exec	0.3	2025-10-07		MIT
tclap	1.2.5	2021-11-01	cpe:2.3:a:tclap_project:tclap:*	MIT

envoy.bootstrap.vcl

Name	Version	Release date	CPE	License
VPP Comms Library	26.02-dev-85abefb.envoy	2026-01-11		Apache-2.0

envoy.filters.http.sxg

Name	Version	Release date	CPE	License
libsxg	0.0.0-210708-beaa393.envoy	2021-07-08		Apache-2.0

Test only

Below we provide the status of the C/C++ dependencies that are only used in tests. Tests also include additional Java, Rust and Python dependencies that are not tracked below.

External dependencies: test_only

Name	Version	Release date	CPE	License
Apache Thrift	0.22.0.envoy	2026-07-11	cpe:2.3:a:apache:thrift:*	Apache-2.0
Aspect Bazel helpers	2.22.0	2025-09-17		Apache-2.0
Benchmark	1.9.5	2026-01-21		Apache-2.0
Emscripten SDK	4.0.23.envoy	2025-03-26		Emscripten SDK
Fuzzing Rules for Bazel	0.6.0	2026-04-16		Apache-2.0
Google Test	1.17.0.bcr.2	2025-04-30	cpe:2.3:a:google:google_test:*	BSD-3-Clause
libpfm	4.11.0.bcr.1	2020-09-02
libprotobuf-mutator	1.5.bcr.1	2025-04-08		Apache-2.0
Packaging rules for Bazel	1.1.0	2025-12-03		Apache-2.0
Protobuf Rules for Bazel	7.1.0	2024-12-18		Apache-2.0
WebAssembly for Proxies (Rust SDK)	0.2.4-251205-5283e57.envoy	2025-10-01		Apache-2.0

envoy.filters.http.aws_request_signing

Name	Version	Release date	CPE	License
aws-c-auth-testdata	0.10.4.envoy	2026-07-10		Apache-2.0