{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:3ae83ecd-c5d0-54a5-9233-d111c7bd19d8",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "github.com/argoproj/argo-cd/v3",
      "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4",
      "type": "library",
      "bom-ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4",
      "version": "3.0.4-tuxcare.4",
      "pedigree": {
        "ancestors": [
          {
            "name": "github.com/argoproj/argo-cd/v3",
            "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4",
            "type": "library",
            "version": "3.0.4"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2022-1025",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:e7fa2c0c-cd09-5e00-95d8-85c09d8d2c26",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-1025 affects version 3.0.4-tuxcare.4 of github.com/argoproj/argo-cd/v3."
      }
    },
    {
      "id": "CVE-2022-24348",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:f9287752-c6db-59d3-acdc-ca4e4aec3a57",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-24348 affects version 3.0.4-tuxcare.4 of github.com/argoproj/argo-cd/v3."
      }
    },
    {
      "id": "CVE-2022-24730",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:2df677f5-23d3-521b-87be-9ca7e6e68bdf",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-24730 affects version 3.0.4-tuxcare.4 of github.com/argoproj/argo-cd/v3."
      }
    },
    {
      "id": "CVE-2022-24731",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:8892172e-be28-5104-a6c0-80ed3647ef3a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-24731 affects version 3.0.4-tuxcare.4 of github.com/argoproj/argo-cd/v3."
      }
    },
    {
      "id": "CVE-2022-24904",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:88b0ec7a-a391-5d13-9191-aab3f78aa37b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-24904 affects version 3.0.4-tuxcare.4 of github.com/argoproj/argo-cd/v3."
      }
    },
    {
      "id": "CVE-2022-24905",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:f24af248-9e71-55b0-b235-2332fc573115",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-24905 affects version 3.0.4-tuxcare.4 of github.com/argoproj/argo-cd/v3."
      }
    },
    {
      "id": "CVE-2022-29165",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:5e0818d1-37e2-50ba-b4bd-540f070a132f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-29165 affects version 3.0.4-tuxcare.4 of github.com/argoproj/argo-cd/v3."
      }
    },
    {
      "id": "CVE-2022-31016",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:e0058c1c-78c7-5731-bbe3-4f0ea53e396c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-31016 affects version 3.0.4-tuxcare.4 of github.com/argoproj/argo-cd/v3."
      }
    },
    {
      "id": "CVE-2022-31034",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:23424af1-a0ca-5826-8b6b-ea06a85466bb",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-31034 affects version 3.0.4-tuxcare.4 of github.com/argoproj/argo-cd/v3."
      }
    },
    {
      "id": "CVE-2022-31035",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:cdb26e20-ef07-534e-81af-af02ed181b8c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-31035 affects version 3.0.4-tuxcare.4 of github.com/argoproj/argo-cd/v3."
      }
    },
    {
      "id": "CVE-2022-31036",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:5466e776-2b19-5561-944a-aa948502fd29",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-31036 affects version 3.0.4-tuxcare.4 of github.com/argoproj/argo-cd/v3."
      }
    },
    {
      "id": "CVE-2022-31102",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:d29f26c0-92d8-5acf-9b8a-f2ccc5c6482a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-31102 affects version 3.0.4-tuxcare.4 of github.com/argoproj/argo-cd/v3."
      }
    },
    {
      "id": "CVE-2022-31105",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:146e5bf4-bc72-5330-a705-2d22a8595391",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-31105 affects version 3.0.4-tuxcare.4 of github.com/argoproj/argo-cd/v3."
      }
    },
    {
      "id": "CVE-2022-41354",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:7a2146db-ea1d-5399-809c-a48a7d0e2e9a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-41354 affects version 3.0.4-tuxcare.4 of github.com/argoproj/argo-cd/v3."
      }
    },
    {
      "id": "CVE-2023-22482",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:252f0a71-0fb3-5046-9f38-f866f9c2e7d1",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-22482 affects version 3.0.4-tuxcare.4 of github.com/argoproj/argo-cd/v3."
      }
    },
    {
      "id": "CVE-2023-22736",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:413aff9f-7727-5b8c-82f9-b5daa2b54814",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-22736 affects version 3.0.4-tuxcare.4 of github.com/argoproj/argo-cd/v3."
      }
    },
    {
      "id": "CVE-2023-23947",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:24b60c23-d78f-54d5-bbe6-d530f33fe357",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-23947 affects version 3.0.4-tuxcare.4 of github.com/argoproj/argo-cd/v3."
      }
    },
    {
      "id": "CVE-2023-40025",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:a1db4809-c6cd-5129-b7af-4cf403fe9a94",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-40025 affects version 3.0.4-tuxcare.4 of github.com/argoproj/argo-cd/v3."
      }
    },
    {
      "id": "CVE-2023-40026",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:0a2a0150-3576-5100-8820-fd23b4a0efc4",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-40026 affects version 3.0.4-tuxcare.4 of github.com/argoproj/argo-cd/v3."
      }
    },
    {
      "id": "CVE-2023-40029",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:bf388dc9-a934-5445-bd5d-15e03610af71",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-40029 affects version 3.0.4-tuxcare.4 of github.com/argoproj/argo-cd/v3."
      }
    },
    {
      "id": "CVE-2023-40584",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:63223aaa-354e-55c5-857d-f57a9aaffb43",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-40584 affects version 3.0.4-tuxcare.4 of github.com/argoproj/argo-cd/v3."
      }
    },
    {
      "id": "CVE-2023-50726",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:fb8fd7a9-3a56-585c-8edd-4d321936a1ce",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-50726 affects version 3.0.4-tuxcare.4 of github.com/argoproj/argo-cd/v3."
      }
    },
    {
      "id": "CVE-2024-28175",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:3c1180d2-75e8-5c9f-9b1c-8d614a847de9",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-28175 affects version 3.0.4-tuxcare.4 of github.com/argoproj/argo-cd/v3."
      }
    },
    {
      "id": "CVE-2024-31989",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:42aedc0e-8a39-51ad-852d-86289d8319ee",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-31989 affects version 3.0.4-tuxcare.4 of github.com/argoproj/argo-cd/v3."
      }
    },
    {
      "id": "CVE-2024-31990",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:926c6398-0e83-5ec3-b4d7-7ae463bc1126",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-31990 affects version 3.0.4-tuxcare.4 of github.com/argoproj/argo-cd/v3."
      }
    },
    {
      "id": "CVE-2024-32476",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:ae56b127-90b9-576c-8342-f5447885dcd3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-32476 affects version 3.0.4-tuxcare.4 of github.com/argoproj/argo-cd/v3."
      }
    },
    {
      "id": "CVE-2024-36106",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:eae7040f-64f2-542a-8316-2c994bba63a2",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-36106 affects version 3.0.4-tuxcare.4 of github.com/argoproj/argo-cd/v3."
      }
    },
    {
      "id": "CVE-2024-37152",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:89ef7ce4-90fd-50ee-9976-592625cfc680",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-37152 affects version 3.0.4-tuxcare.4 of github.com/argoproj/argo-cd/v3."
      }
    },
    {
      "id": "CVE-2024-40634",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:694891ca-11eb-5046-bb70-f080505d26db",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-40634 affects version 3.0.4-tuxcare.4 of github.com/argoproj/argo-cd/v3."
      }
    },
    {
      "id": "CVE-2024-41666",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:337baac4-9275-5db0-b210-fb651540675e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-41666 affects version 3.0.4-tuxcare.4 of github.com/argoproj/argo-cd/v3."
      }
    },
    {
      "id": "CVE-2025-23216",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:2ddd8af2-9996-5a1b-8aba-a7e33d2e56a5",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-23216 affects version 3.0.4-tuxcare.4 of github.com/argoproj/argo-cd/v3."
      }
    },
    {
      "id": "CVE-2025-47933",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:3a485cad-6288-5fb9-bec8-49a68d947187",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-47933 affects version 3.0.4-tuxcare.4 of github.com/argoproj/argo-cd/v3."
      }
    },
    {
      "id": "CVE-2025-55190",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:cfaa58ec-28c5-581a-8361-f97d987548f3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-55190 affects version 3.0.4-tuxcare.4 of github.com/argoproj/argo-cd/v3."
      }
    },
    {
      "id": "CVE-2025-55191",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:68432ff1-d519-5075-99da-edd1bf6d6543",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-55191 affects version 3.0.4-tuxcare.4 of github.com/argoproj/argo-cd/v3."
      }
    },
    {
      "id": "CVE-2025-59531",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:9d7ba645-ae55-55d9-b9fe-4976f8110eda",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-59531 affects version 3.0.4-tuxcare.4 of github.com/argoproj/argo-cd/v3."
      }
    },
    {
      "id": "CVE-2025-59537",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:0f19131b-f27e-5456-b276-ae481549db1e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-59537 affects version 3.0.4-tuxcare.4 of github.com/argoproj/argo-cd/v3."
      }
    },
    {
      "id": "CVE-2025-59538",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:f609baf8-87c5-5fab-878e-d9a65026101d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-59538 affects version 3.0.4-tuxcare.4 of github.com/argoproj/argo-cd/v3."
      }
    },
    {
      "id": "CVE-2026-42880",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:5e45c02a-33a9-5504-99a3-a0c8c450a76f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42880 affects version 3.0.4-tuxcare.4 of github.com/argoproj/argo-cd/v3."
      }
    },
    {
      "id": "CVE-2026-45737",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:f03672d2-adaf-575f-a34f-0efd9ce0ac15",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45737 affects version 3.0.4-tuxcare.4 of github.com/argoproj/argo-cd/v3."
      }
    },
    {
      "id": "CVE-2026-45738",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:50e78601-bfd5-53ea-b3f7-72f69b0b0e5b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45738 affects version 3.0.4-tuxcare.4 of github.com/argoproj/argo-cd/v3."
      }
    },
    {
      "id": "CVE-2026-55797",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:f0fdef93-8ef9-58c2-b7d3-657bb566bcd3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55797 affects version 3.0.4-tuxcare.4 of github.com/argoproj/argo-cd/v3."
      }
    },
    {
      "id": "CVE-2026-77459",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:f714d702-186a-51e2-ae07-d460611889a6",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-77459 affects version 3.0.4-tuxcare.4 of github.com/argoproj/argo-cd/v3."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.4"
    }
  ]
}