{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:f6c9f11f-4111-5038-88e0-3bef38428e30",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "github.com/argoproj/argo-cd/v3",
      "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1",
      "type": "library",
      "bom-ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1",
      "version": "3.0.4-tuxcare.1",
      "pedigree": {
        "ancestors": [
          {
            "name": "github.com/argoproj/argo-cd/v3",
            "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4",
            "type": "library",
            "version": "3.0.4"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2022-1025",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:68a772e7-8eff-597a-a989-8b96ee8cc078",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-1025 affects version 3.0.4-tuxcare.1 of github.com/argoproj/argo-cd/v3."
      }
    },
    {
      "id": "CVE-2022-24348",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:084c88f5-852a-5040-b28d-92e6a7e7f1e3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-24348 affects version 3.0.4-tuxcare.1 of github.com/argoproj/argo-cd/v3."
      }
    },
    {
      "id": "CVE-2022-24730",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:515caf86-cebb-54c9-abb4-d2759d2ead45",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-24730 affects version 3.0.4-tuxcare.1 of github.com/argoproj/argo-cd/v3."
      }
    },
    {
      "id": "CVE-2022-24731",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:edee6849-5339-5636-bff5-37c8ffa6b506",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-24731 affects version 3.0.4-tuxcare.1 of github.com/argoproj/argo-cd/v3."
      }
    },
    {
      "id": "CVE-2022-24904",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:e8633a68-e314-562b-aabd-b3724c9ba1d5",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-24904 affects version 3.0.4-tuxcare.1 of github.com/argoproj/argo-cd/v3."
      }
    },
    {
      "id": "CVE-2022-24905",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:e3866b25-206f-5cb0-a72d-8f53dcf5f51e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-24905 affects version 3.0.4-tuxcare.1 of github.com/argoproj/argo-cd/v3."
      }
    },
    {
      "id": "CVE-2022-29165",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:86584ade-1328-5b36-81dd-6c4df1208a72",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-29165 affects version 3.0.4-tuxcare.1 of github.com/argoproj/argo-cd/v3."
      }
    },
    {
      "id": "CVE-2022-31016",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:606433ef-b434-5ae0-9c0d-ade112c9b655",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-31016 affects version 3.0.4-tuxcare.1 of github.com/argoproj/argo-cd/v3."
      }
    },
    {
      "id": "CVE-2022-31034",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:4b2bbfe7-93cc-50a8-8898-423222d7d111",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-31034 affects version 3.0.4-tuxcare.1 of github.com/argoproj/argo-cd/v3."
      }
    },
    {
      "id": "CVE-2022-31035",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:69f7a827-dff0-58ac-96d0-b53ab2700c47",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-31035 affects version 3.0.4-tuxcare.1 of github.com/argoproj/argo-cd/v3."
      }
    },
    {
      "id": "CVE-2022-31036",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:a346f39d-6da9-5cbe-a08a-0ba4f7b2fdc2",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-31036 affects version 3.0.4-tuxcare.1 of github.com/argoproj/argo-cd/v3."
      }
    },
    {
      "id": "CVE-2022-31102",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:f8cec35f-c74b-5dad-ae4f-9d9b90750db6",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-31102 affects version 3.0.4-tuxcare.1 of github.com/argoproj/argo-cd/v3."
      }
    },
    {
      "id": "CVE-2022-31105",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:14847fb6-28fb-5d76-94aa-fe7ca046000c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-31105 affects version 3.0.4-tuxcare.1 of github.com/argoproj/argo-cd/v3."
      }
    },
    {
      "id": "CVE-2022-41354",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:27caef5e-7a9d-550b-885d-85724398ee41",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-41354 affects version 3.0.4-tuxcare.1 of github.com/argoproj/argo-cd/v3."
      }
    },
    {
      "id": "CVE-2023-22482",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:5e007437-1882-5c9c-a4e4-ed976428c247",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-22482 affects version 3.0.4-tuxcare.1 of github.com/argoproj/argo-cd/v3."
      }
    },
    {
      "id": "CVE-2023-22736",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:330af323-e172-526a-a728-c4a882e1d126",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-22736 affects version 3.0.4-tuxcare.1 of github.com/argoproj/argo-cd/v3."
      }
    },
    {
      "id": "CVE-2023-23947",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:673b6172-d8fe-5864-80ea-98039f9d34d4",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-23947 affects version 3.0.4-tuxcare.1 of github.com/argoproj/argo-cd/v3."
      }
    },
    {
      "id": "CVE-2023-40025",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:17797497-4bd2-5db3-8e2b-8625e437191a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-40025 affects version 3.0.4-tuxcare.1 of github.com/argoproj/argo-cd/v3."
      }
    },
    {
      "id": "CVE-2023-40026",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:5afe9159-3679-565d-b32b-eee5f8f9ee72",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-40026 affects version 3.0.4-tuxcare.1 of github.com/argoproj/argo-cd/v3."
      }
    },
    {
      "id": "CVE-2023-40029",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:b8a1ee8f-452d-588c-ad65-d1ffbf17b39a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-40029 affects version 3.0.4-tuxcare.1 of github.com/argoproj/argo-cd/v3."
      }
    },
    {
      "id": "CVE-2023-40584",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:870e78e4-06a1-5c53-91a9-cf25d5d3e02c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-40584 affects version 3.0.4-tuxcare.1 of github.com/argoproj/argo-cd/v3."
      }
    },
    {
      "id": "CVE-2023-50726",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:f24d1eba-4d05-5c4b-9f09-9af934108923",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-50726 affects version 3.0.4-tuxcare.1 of github.com/argoproj/argo-cd/v3."
      }
    },
    {
      "id": "CVE-2024-28175",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:770995b9-1749-5791-b9b5-db178ea8e104",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-28175 affects version 3.0.4-tuxcare.1 of github.com/argoproj/argo-cd/v3."
      }
    },
    {
      "id": "CVE-2024-31989",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:f863f1b2-b0ec-591d-9618-e140101bf45c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-31989 affects version 3.0.4-tuxcare.1 of github.com/argoproj/argo-cd/v3."
      }
    },
    {
      "id": "CVE-2024-31990",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:e02b7491-e5c1-550b-bddf-c57dd9ba4314",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-31990 affects version 3.0.4-tuxcare.1 of github.com/argoproj/argo-cd/v3."
      }
    },
    {
      "id": "CVE-2024-32476",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:5fcdc704-0d22-5120-83f3-da50b94629b5",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-32476 affects version 3.0.4-tuxcare.1 of github.com/argoproj/argo-cd/v3."
      }
    },
    {
      "id": "CVE-2024-36106",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:e38472f5-0a68-542a-ae44-83706c98e8af",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-36106 affects version 3.0.4-tuxcare.1 of github.com/argoproj/argo-cd/v3."
      }
    },
    {
      "id": "CVE-2024-37152",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:53db34ce-402e-5191-bc63-74ad2a0c23b9",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-37152 affects version 3.0.4-tuxcare.1 of github.com/argoproj/argo-cd/v3."
      }
    },
    {
      "id": "CVE-2024-40634",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:2205a14e-b6d1-514e-acd2-92d0df317ce0",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-40634 affects version 3.0.4-tuxcare.1 of github.com/argoproj/argo-cd/v3."
      }
    },
    {
      "id": "CVE-2024-41666",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:3ec9b0c0-d4e0-519e-a64e-f87d2e05703d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-41666 affects version 3.0.4-tuxcare.1 of github.com/argoproj/argo-cd/v3."
      }
    },
    {
      "id": "CVE-2025-23216",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:5c9493a8-d22d-525d-bafb-518c2d63bafc",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-23216 affects version 3.0.4-tuxcare.1 of github.com/argoproj/argo-cd/v3."
      }
    },
    {
      "id": "CVE-2025-47933",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:ff01f1d5-e476-5b0f-9986-2787e8d78a33",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-47933 affects version 3.0.4-tuxcare.1 of github.com/argoproj/argo-cd/v3."
      }
    },
    {
      "id": "CVE-2025-55190",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:efa12940-6d96-5486-b2e5-db8cd340beec",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-55190 affects version 3.0.4-tuxcare.1 of github.com/argoproj/argo-cd/v3."
      }
    },
    {
      "id": "CVE-2025-55191",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:9afd3e66-1fd3-5779-9175-c44206b55c10",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-55191 affects version 3.0.4-tuxcare.1 of github.com/argoproj/argo-cd/v3."
      }
    },
    {
      "id": "CVE-2025-59531",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:6d7fdef6-cb4f-5926-bc70-428ebab36227",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-59531 affects version 3.0.4-tuxcare.1 of github.com/argoproj/argo-cd/v3."
      }
    },
    {
      "id": "CVE-2025-59537",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:6fb359c0-42a2-5bd1-bfd4-959d240d34ae",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-59537 affects version 3.0.4-tuxcare.1 of github.com/argoproj/argo-cd/v3."
      }
    },
    {
      "id": "CVE-2025-59538",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:e1d497a7-7a1e-5f7b-a4b1-2b327bbb8a6b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-59538 affects version 3.0.4-tuxcare.1 of github.com/argoproj/argo-cd/v3."
      }
    },
    {
      "id": "CVE-2026-42880",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:c5241cfa-91c1-5208-91b5-e43d758bdd5f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42880 affects version 3.0.4-tuxcare.1 of github.com/argoproj/argo-cd/v3."
      }
    },
    {
      "id": "CVE-2026-45737",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:823a4c00-b84c-57ed-8424-40ecb1a4894a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45737 affects version 3.0.4-tuxcare.1 of github.com/argoproj/argo-cd/v3."
      }
    },
    {
      "id": "CVE-2026-45738",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:aa4ad084-edb2-593f-813e-5bb95959be2e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45738 affects version 3.0.4-tuxcare.1 of github.com/argoproj/argo-cd/v3."
      }
    },
    {
      "id": "CVE-2026-55797",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:a4eb3b16-2e5d-55f7-b8e1-7c7c17228839",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55797 affects version 3.0.4-tuxcare.1 of github.com/argoproj/argo-cd/v3."
      }
    },
    {
      "id": "CVE-2026-77459",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:b8d8f9b1-c010-5476-ab83-9fefe42f1d57",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-77459 affects version 3.0.4-tuxcare.1 of github.com/argoproj/argo-cd/v3."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.1"
    }
  ]
}