{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:dcd8ba90-6f50-5979-acbf-e10988ea387d",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "github.com/argoproj/argo-cd/v3",
      "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2",
      "type": "library",
      "bom-ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2",
      "version": "3.0.4-tuxcare.2",
      "pedigree": {
        "ancestors": [
          {
            "name": "github.com/argoproj/argo-cd/v3",
            "purl": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4",
            "type": "library",
            "version": "3.0.4"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2022-1025",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:7ed30073-0c29-5bf4-a84c-695db1b78a0f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-1025 affects version 3.0.4-tuxcare.2 of github.com/argoproj/argo-cd/v3."
      }
    },
    {
      "id": "CVE-2022-24348",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:8d87fe2d-390f-5770-9861-02313443b0a8",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-24348 affects version 3.0.4-tuxcare.2 of github.com/argoproj/argo-cd/v3."
      }
    },
    {
      "id": "CVE-2022-24730",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:66af9813-fe42-50cb-b4fe-a3414345ab4c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-24730 affects version 3.0.4-tuxcare.2 of github.com/argoproj/argo-cd/v3."
      }
    },
    {
      "id": "CVE-2022-24731",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:6e41eab6-c868-51be-af8e-44a9f9d54a1d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-24731 affects version 3.0.4-tuxcare.2 of github.com/argoproj/argo-cd/v3."
      }
    },
    {
      "id": "CVE-2022-24904",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:36a3291e-a6ef-560b-b6d1-739df9b98970",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-24904 affects version 3.0.4-tuxcare.2 of github.com/argoproj/argo-cd/v3."
      }
    },
    {
      "id": "CVE-2022-24905",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:293a3086-854d-5c5e-9e70-601560b229f8",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-24905 affects version 3.0.4-tuxcare.2 of github.com/argoproj/argo-cd/v3."
      }
    },
    {
      "id": "CVE-2022-29165",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:e3a30be2-02b5-5a54-9428-9416515acb4d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-29165 affects version 3.0.4-tuxcare.2 of github.com/argoproj/argo-cd/v3."
      }
    },
    {
      "id": "CVE-2022-31016",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:87d51238-c2a1-5385-9995-d687b5c15942",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-31016 affects version 3.0.4-tuxcare.2 of github.com/argoproj/argo-cd/v3."
      }
    },
    {
      "id": "CVE-2022-31034",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:43996204-5ad1-56df-ac64-59a0e831317d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-31034 affects version 3.0.4-tuxcare.2 of github.com/argoproj/argo-cd/v3."
      }
    },
    {
      "id": "CVE-2022-31035",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:2c90e67c-8cec-51ab-99c1-b2ce4a25e7cd",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-31035 affects version 3.0.4-tuxcare.2 of github.com/argoproj/argo-cd/v3."
      }
    },
    {
      "id": "CVE-2022-31036",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:108c439a-f9d2-5967-88e2-4d7bddc0f018",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-31036 affects version 3.0.4-tuxcare.2 of github.com/argoproj/argo-cd/v3."
      }
    },
    {
      "id": "CVE-2022-31102",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:49596bd6-b38f-513d-90a7-bb316532af6c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-31102 affects version 3.0.4-tuxcare.2 of github.com/argoproj/argo-cd/v3."
      }
    },
    {
      "id": "CVE-2022-31105",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:025fae07-b40f-5970-84fe-0501fec480dd",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-31105 affects version 3.0.4-tuxcare.2 of github.com/argoproj/argo-cd/v3."
      }
    },
    {
      "id": "CVE-2022-41354",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:55a67778-1790-5ebd-9efe-4eadf78fde1d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-41354 affects version 3.0.4-tuxcare.2 of github.com/argoproj/argo-cd/v3."
      }
    },
    {
      "id": "CVE-2023-22482",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:f39b8d88-f66a-59f6-8178-49e48d2b9ee1",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-22482 affects version 3.0.4-tuxcare.2 of github.com/argoproj/argo-cd/v3."
      }
    },
    {
      "id": "CVE-2023-22736",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:09e5c634-fff1-5ba6-9c70-fc703e1a7f5d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-22736 affects version 3.0.4-tuxcare.2 of github.com/argoproj/argo-cd/v3."
      }
    },
    {
      "id": "CVE-2023-23947",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:4a3d0b8b-3dcb-5ad4-a318-b33b258118fc",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-23947 affects version 3.0.4-tuxcare.2 of github.com/argoproj/argo-cd/v3."
      }
    },
    {
      "id": "CVE-2023-40025",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:57a4660b-7fa5-5043-b010-e643da9c9c7e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-40025 affects version 3.0.4-tuxcare.2 of github.com/argoproj/argo-cd/v3."
      }
    },
    {
      "id": "CVE-2023-40026",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:87c549e5-9420-52ca-9d9d-b47ad442e580",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-40026 affects version 3.0.4-tuxcare.2 of github.com/argoproj/argo-cd/v3."
      }
    },
    {
      "id": "CVE-2023-40029",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:0424f55f-d96a-5012-a541-d0c1cf2243d2",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-40029 affects version 3.0.4-tuxcare.2 of github.com/argoproj/argo-cd/v3."
      }
    },
    {
      "id": "CVE-2023-40584",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:571b9d2c-a9fe-57fe-9eb2-42172daef546",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-40584 affects version 3.0.4-tuxcare.2 of github.com/argoproj/argo-cd/v3."
      }
    },
    {
      "id": "CVE-2023-50726",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:26c338b8-6fdf-5af1-bc98-7de1dd02219c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-50726 affects version 3.0.4-tuxcare.2 of github.com/argoproj/argo-cd/v3."
      }
    },
    {
      "id": "CVE-2024-28175",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:e29786ee-db47-5a9c-b3b8-607f5f9a4ff9",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-28175 affects version 3.0.4-tuxcare.2 of github.com/argoproj/argo-cd/v3."
      }
    },
    {
      "id": "CVE-2024-31989",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:d25f87b6-7511-59c9-b05c-6983a5fd36c3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-31989 affects version 3.0.4-tuxcare.2 of github.com/argoproj/argo-cd/v3."
      }
    },
    {
      "id": "CVE-2024-31990",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:ffeeb634-1a4f-5c66-818d-b13a03aa38c8",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-31990 affects version 3.0.4-tuxcare.2 of github.com/argoproj/argo-cd/v3."
      }
    },
    {
      "id": "CVE-2024-32476",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:9164471a-e6e5-573b-848e-d55d5b2a6db6",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-32476 affects version 3.0.4-tuxcare.2 of github.com/argoproj/argo-cd/v3."
      }
    },
    {
      "id": "CVE-2024-36106",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:b8f38e36-3966-57e5-8f89-386b4dd4ed59",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-36106 affects version 3.0.4-tuxcare.2 of github.com/argoproj/argo-cd/v3."
      }
    },
    {
      "id": "CVE-2024-37152",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:8df589b9-4135-5b05-846c-67f98fe3640c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-37152 affects version 3.0.4-tuxcare.2 of github.com/argoproj/argo-cd/v3."
      }
    },
    {
      "id": "CVE-2024-40634",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:f8cac442-5ee9-50ee-9a7d-98f5727d688b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-40634 affects version 3.0.4-tuxcare.2 of github.com/argoproj/argo-cd/v3."
      }
    },
    {
      "id": "CVE-2024-41666",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:3460d0f0-52d6-500c-99d2-8d2236ae3369",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-41666 affects version 3.0.4-tuxcare.2 of github.com/argoproj/argo-cd/v3."
      }
    },
    {
      "id": "CVE-2025-23216",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:70506869-696e-5aef-8c13-ea5071a5e852",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-23216 affects version 3.0.4-tuxcare.2 of github.com/argoproj/argo-cd/v3."
      }
    },
    {
      "id": "CVE-2025-47933",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:498acf82-21f9-5bdb-8acd-a58fda0cf224",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-47933 affects version 3.0.4-tuxcare.2 of github.com/argoproj/argo-cd/v3."
      }
    },
    {
      "id": "CVE-2025-55190",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:dd61335a-0939-5a35-bb13-0b10af013ae8",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-55190 affects version 3.0.4-tuxcare.2 of github.com/argoproj/argo-cd/v3."
      }
    },
    {
      "id": "CVE-2025-55191",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:8ad1b5f4-7a74-5447-8662-22a453a830de",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-55191 affects version 3.0.4-tuxcare.2 of github.com/argoproj/argo-cd/v3."
      }
    },
    {
      "id": "CVE-2025-59531",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:eacb49a1-e65a-59be-aa9d-3cb666d798e7",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-59531 affects version 3.0.4-tuxcare.2 of github.com/argoproj/argo-cd/v3."
      }
    },
    {
      "id": "CVE-2025-59537",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:a5dbc59a-25f6-51d5-ad27-1ba9bac19425",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-59537 affects version 3.0.4-tuxcare.2 of github.com/argoproj/argo-cd/v3."
      }
    },
    {
      "id": "CVE-2025-59538",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:c3b39b78-5712-5c9f-9f38-34649d27958b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-59538 affects version 3.0.4-tuxcare.2 of github.com/argoproj/argo-cd/v3."
      }
    },
    {
      "id": "CVE-2026-42880",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:dacd5ede-a729-552c-a430-455a65c14ade",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42880 affects version 3.0.4-tuxcare.2 of github.com/argoproj/argo-cd/v3."
      }
    },
    {
      "id": "CVE-2026-45737",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:62a8d290-9415-548b-9876-0012242560a7",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45737 affects version 3.0.4-tuxcare.2 of github.com/argoproj/argo-cd/v3."
      }
    },
    {
      "id": "CVE-2026-45738",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:205eda60-2760-5dd3-af65-4828996b3f9d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45738 affects version 3.0.4-tuxcare.2 of github.com/argoproj/argo-cd/v3."
      }
    },
    {
      "id": "CVE-2026-55797",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:199a67a3-e72d-5ad7-9307-b4a339d15f82",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-55797 affects version 3.0.4-tuxcare.2 of github.com/argoproj/argo-cd/v3."
      }
    },
    {
      "id": "CVE-2026-77459",
      "affects": [
        {
          "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:9115bf08-aa01-590e-ba3b-c91ac317c407",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-77459 affects version 3.0.4-tuxcare.2 of github.com/argoproj/argo-cd/v3."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:golang/github.com/argoproj/argo-cd/v3@3.0.4-tuxcare.2"
    }
  ]
}