Does docker have a single system to report included libraries up to management, so that when, for example, there's a major hole in openssl or nginx or a php library or the Chromium engine, I will immediately know which docker images are vulnerable and which I don't have to worry about?

Because until that happens, the only way I can run docker images is when I've created them myself... and even then I really need a tool that does the above, so that I can rebuild them when the next CVE comes around.