How to Find Every Consumer of Your Docker Base Image

When a CVE hits your Docker base image, which repos are affected? Here's why the answer is harder than it should be, and what a real solution requires.