{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:6ca0d6b2-69d2-519c-be1f-aad9b1bebce6",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "github.com/argoproj/argo-cd/v3",
      "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3",
      "type": "library",
      "bom-ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3",
      "version": "3.0.4-tuxcare.3",
      "pedigree": {
        "ancestors": [
          {
            "name": "github.com/argoproj/argo-cd/v3",
            "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4",
            "type": "library",
            "version": "3.0.4"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2022-1025",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:57e7995d-a5a0-5384-8fbf-6bb1a871ee92",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-1025 affects version 3.0.4-tuxcare.3 of github.com/argoproj/argo-cd/v3."
      }
    },
    {
      "id": "CVE-2022-24348",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:02583d16-b658-5d3f-b479-626c09c18be8",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-24348 affects version 3.0.4-tuxcare.3 of github.com/argoproj/argo-cd/v3."
      }
    },
    {
      "id": "CVE-2022-24730",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:82be28bd-6ff7-5c5b-b29b-0107f3956827",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-24730 affects version 3.0.4-tuxcare.3 of github.com/argoproj/argo-cd/v3."
      }
    },
    {
      "id": "CVE-2022-24731",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:5a9f6e87-fb54-5c88-a57b-381b626f2003",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-24731 affects version 3.0.4-tuxcare.3 of github.com/argoproj/argo-cd/v3."
      }
    },
    {
      "id": "CVE-2022-24904",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:ce7a2872-fa74-5522-b0d0-9ac7a3a25235",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-24904 affects version 3.0.4-tuxcare.3 of github.com/argoproj/argo-cd/v3."
      }
    },
    {
      "id": "CVE-2022-24905",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:cf4871cd-53dc-5376-9f07-221e6b292d55",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-24905 affects version 3.0.4-tuxcare.3 of github.com/argoproj/argo-cd/v3."
      }
    },
    {
      "id": "CVE-2022-29165",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:7a4e0ac4-9f98-5bee-acc9-aee7db151e41",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-29165 affects version 3.0.4-tuxcare.3 of github.com/argoproj/argo-cd/v3."
      }
    },
    {
      "id": "CVE-2022-31016",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:e9e4727c-8089-53d9-b4c5-3f84210bc99a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-31016 affects version 3.0.4-tuxcare.3 of github.com/argoproj/argo-cd/v3."
      }
    },
    {
      "id": "CVE-2022-31034",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:ec7391d7-14e0-5aad-ade0-8bbf70a08231",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-31034 affects version 3.0.4-tuxcare.3 of github.com/argoproj/argo-cd/v3."
      }
    },
    {
      "id": "CVE-2022-31035",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:a9876507-6f42-50e4-b1f2-2adf6dfe8b19",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-31035 affects version 3.0.4-tuxcare.3 of github.com/argoproj/argo-cd/v3."
      }
    },
    {
      "id": "CVE-2022-31036",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:aeb0c22e-248a-5f98-96a6-a2d48699df7c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-31036 affects version 3.0.4-tuxcare.3 of github.com/argoproj/argo-cd/v3."
      }
    },
    {
      "id": "CVE-2022-31102",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:2560f5cc-e4fd-5257-b1cd-43ac9fe75d99",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-31102 affects version 3.0.4-tuxcare.3 of github.com/argoproj/argo-cd/v3."
      }
    },
    {
      "id": "CVE-2022-31105",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:834e875b-2e66-516c-bc1d-d7c7fb4f255e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-31105 affects version 3.0.4-tuxcare.3 of github.com/argoproj/argo-cd/v3."
      }
    },
    {
      "id": "CVE-2022-41354",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:55256929-d04d-5744-b93f-6faa6e0550fc",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-41354 affects version 3.0.4-tuxcare.3 of github.com/argoproj/argo-cd/v3."
      }
    },
    {
      "id": "CVE-2023-22482",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:454df8cf-8022-5883-9b24-037b77db121d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-22482 affects version 3.0.4-tuxcare.3 of github.com/argoproj/argo-cd/v3."
      }
    },
    {
      "id": "CVE-2023-22736",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:acbb71f5-b11e-57c2-9008-92ac0e24d8a4",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-22736 affects version 3.0.4-tuxcare.3 of github.com/argoproj/argo-cd/v3."
      }
    },
    {
      "id": "CVE-2023-23947",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:67850188-d027-539a-8ed9-e510fb288b70",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-23947 affects version 3.0.4-tuxcare.3 of github.com/argoproj/argo-cd/v3."
      }
    },
    {
      "id": "CVE-2023-40025",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:25654ca4-386f-504a-9c6d-540f361f8c3d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-40025 affects version 3.0.4-tuxcare.3 of github.com/argoproj/argo-cd/v3."
      }
    },
    {
      "id": "CVE-2023-40026",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:8af95f85-5378-5a62-82f8-277b7a9f0233",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-40026 affects version 3.0.4-tuxcare.3 of github.com/argoproj/argo-cd/v3."
      }
    },
    {
      "id": "CVE-2023-40029",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:9c1a9c6e-81fb-5aad-85f1-f3cc2401bf6a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-40029 affects version 3.0.4-tuxcare.3 of github.com/argoproj/argo-cd/v3."
      }
    },
    {
      "id": "CVE-2023-40584",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:ae8f1b65-c94c-564c-babf-6df3493c0919",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-40584 affects version 3.0.4-tuxcare.3 of github.com/argoproj/argo-cd/v3."
      }
    },
    {
      "id": "CVE-2023-50726",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:59b7fcbd-3a4c-5b44-916a-b17a49ad9791",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-50726 affects version 3.0.4-tuxcare.3 of github.com/argoproj/argo-cd/v3."
      }
    },
    {
      "id": "CVE-2024-28175",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:4986ab74-0a36-55ec-a64d-ae44533b3a04",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-28175 affects version 3.0.4-tuxcare.3 of github.com/argoproj/argo-cd/v3."
      }
    },
    {
      "id": "CVE-2024-31989",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:88379708-1ba5-58e6-aed5-42c1a38c677f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-31989 affects version 3.0.4-tuxcare.3 of github.com/argoproj/argo-cd/v3."
      }
    },
    {
      "id": "CVE-2024-31990",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:8f1f20f9-ee8b-53a1-91e8-1c11d65fa97b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-31990 affects version 3.0.4-tuxcare.3 of github.com/argoproj/argo-cd/v3."
      }
    },
    {
      "id": "CVE-2024-32476",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:fb4889fc-6937-56e4-8098-9aa227baa764",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-32476 affects version 3.0.4-tuxcare.3 of github.com/argoproj/argo-cd/v3."
      }
    },
    {
      "id": "CVE-2024-36106",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:54ed0113-673c-59fc-b440-0fb9bee54f39",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-36106 affects version 3.0.4-tuxcare.3 of github.com/argoproj/argo-cd/v3."
      }
    },
    {
      "id": "CVE-2024-37152",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:510d71ef-a48f-567d-bf67-1327bcddc2c1",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-37152 affects version 3.0.4-tuxcare.3 of github.com/argoproj/argo-cd/v3."
      }
    },
    {
      "id": "CVE-2024-40634",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:afbbf537-5068-5c16-8e01-5183e50db9a0",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-40634 affects version 3.0.4-tuxcare.3 of github.com/argoproj/argo-cd/v3."
      }
    },
    {
      "id": "CVE-2024-41666",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:abfa2323-bc0f-56d4-9feb-93a5a321d65f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-41666 affects version 3.0.4-tuxcare.3 of github.com/argoproj/argo-cd/v3."
      }
    },
    {
      "id": "CVE-2025-23216",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:a07fab8f-0034-583a-b62f-744dd405aa96",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-23216 affects version 3.0.4-tuxcare.3 of github.com/argoproj/argo-cd/v3."
      }
    },
    {
      "id": "CVE-2025-47933",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:ad1c4dda-06d1-5f9c-98ea-9990e853ec1e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-47933 affects version 3.0.4-tuxcare.3 of github.com/argoproj/argo-cd/v3."
      }
    },
    {
      "id": "CVE-2025-55190",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:40416a6c-023f-5b61-8bfa-86088c17a981",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-55190 affects version 3.0.4-tuxcare.3 of github.com/argoproj/argo-cd/v3."
      }
    },
    {
      "id": "CVE-2025-55191",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:ee9cae84-802e-5088-8d89-ac7a765cfe22",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-55191 affects version 3.0.4-tuxcare.3 of github.com/argoproj/argo-cd/v3."
      }
    },
    {
      "id": "CVE-2025-59531",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:52304979-38bc-5ce5-a2e0-084be2413454",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-59531 affects version 3.0.4-tuxcare.3 of github.com/argoproj/argo-cd/v3."
      }
    },
    {
      "id": "CVE-2025-59537",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:7789f530-3bd6-5de4-8906-f202a99ac8e1",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-59537 affects version 3.0.4-tuxcare.3 of github.com/argoproj/argo-cd/v3."
      }
    },
    {
      "id": "CVE-2025-59538",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:a1354eb0-3898-5306-b5b8-7c6cf635ac67",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-59538 affects version 3.0.4-tuxcare.3 of github.com/argoproj/argo-cd/v3."
      }
    },
    {
      "id": "CVE-2026-42880",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:1855f27b-1f22-5523-9772-04000cb43a43",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42880 affects version 3.0.4-tuxcare.3 of github.com/argoproj/argo-cd/v3."
      }
    },
    {
      "id": "CVE-2026-45737",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:77fba245-821d-54b8-b846-bd01138686bb",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45737 affects version 3.0.4-tuxcare.3 of github.com/argoproj/argo-cd/v3."
      }
    },
    {
      "id": "CVE-2026-45738",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:76f57ed4-4ddc-51c1-8963-424bca3a61f1",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45738 affects version 3.0.4-tuxcare.3 of github.com/argoproj/argo-cd/v3."
      }
    },
    {
      "id": "CVE-2026-55797",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:6b0d8800-ae01-569b-a5e1-c58dbac13627",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55797 affects version 3.0.4-tuxcare.3 of github.com/argoproj/argo-cd/v3."
      }
    },
    {
      "id": "CVE-2026-77459",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:5d498654-3404-5517-b1f4-090012a1a634",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-77459 affects version 3.0.4-tuxcare.3 of github.com/argoproj/argo-cd/v3."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.3"
    }
  ]
}