Critical CVEs in at least 2.11.0 and 2.12.0

```shell
docker scout cves cockroachdb/cockroach-operator:v2.12.0
✓ Pulled
✓ Image stored for indexing
✓ Indexed 344 packages
✗ Detected 23 vulnerable packages with a total of 88 vulnerabilities

## Overview

│ Analyzed Image
────────────────────┼───────────────────────────────────────────
Target │ cockroachdb/cockroach-operator:v2.12.0
digest │ 7cacb9821e89
platform │ linux/amd64
vulnerabilities │ 3C 49H 24M 13L 3?
size │ 190 MB
packages │ 344

## Packages and Vulnerabilities

3C 36H 12M 1L 2? stdlib 1.16.6
pkg:golang/stdlib@1.16.6

✗ CRITICAL CVE-2023-24540
https://scout.docker.com/v/CVE-2023-24540
Affected range : <1.19.9
Fixed version : 1.19.9

✗ CRITICAL CVE-2023-24538
https://scout.docker.com/v/CVE-2023-24538
Affected range : <1.19.8
Fixed version : 1.19.8

✗ CRITICAL CVE-2022-23806
https://scout.docker.com/v/CVE-2022-23806
Affected range : <1.16.14
Fixed version : 1.16.14

✗ HIGH CVE-2023-29403
https://scout.docker.com/v/CVE-2023-29403
Affected range : <1.19.10
Fixed version : 1.19.10

✗ HIGH CVE-2022-30580
https://scout.docker.com/v/CVE-2022-30580
Affected range : <1.17.11
Fixed version : 1.17.11

✗ HIGH CVE-2023-44487
https://scout.docker.com/v/CVE-2023-44487
Affected range : <1.20.10
Fixed version : 1.20.10

✗ HIGH CVE-2023-39325
https://scout.docker.com/v/CVE-2023-39325
Affected range : <1.20.10
Fixed version : 1.20.10

✗ HIGH CVE-2023-24537
https://scout.docker.com/v/CVE-2023-24537
Affected range : <1.19.8
Fixed version : 1.19.8

✗ HIGH CVE-2023-24536
https://scout.docker.com/v/CVE-2023-24536
Affected range : <1.19.8
Fixed version : 1.19.8

✗ HIGH CVE-2023-24534
https://scout.docker.com/v/CVE-2023-24534
Affected range : <1.19.8
Fixed version : 1.19.8

✗ HIGH CVE-2022-41725
https://scout.docker.com/v/CVE-2022-41725
Affected range : <1.19.6
Fixed version : 1.19.6

✗ HIGH CVE-2022-41724
https://scout.docker.com/v/CVE-2022-41724
Affected range : <1.19.6
Fixed version : 1.19.6

✗ HIGH CVE-2022-41723
https://scout.docker.com/v/CVE-2022-41723
Affected range : <1.19.6
Fixed version : 1.19.6

✗ HIGH CVE-2022-41722
https://scout.docker.com/v/CVE-2022-41722
Affected range : <1.19.6
Fixed version : 1.19.6

✗ HIGH CVE-2022-41720
https://scout.docker.com/v/CVE-2022-41720
Affected range : <1.18.9
Fixed version : 1.18.9

✗ HIGH CVE-2022-41716
https://scout.docker.com/v/CVE-2022-41716
Affected range : <1.18.8
Fixed version : 1.18.8

✗ HIGH CVE-2022-41715
https://scout.docker.com/v/CVE-2022-41715
Affected range : <1.18.7
Fixed version : 1.18.7

✗ HIGH CVE-2022-32189
https://scout.docker.com/v/CVE-2022-32189
Affected range : <1.17.13
Fixed version : 1.17.13

✗ HIGH CVE-2022-30635
https://scout.docker.com/v/CVE-2022-30635
Affected range : <1.17.12
Fixed version : 1.17.12

✗ HIGH CVE-2022-30634
https://scout.docker.com/v/CVE-2022-30634
Affected range : <1.17.11
Fixed version : 1.17.11

✗ HIGH CVE-2022-30633
https://scout.docker.com/v/CVE-2022-30633
Affected range : <1.17.12
Fixed version : 1.17.12

✗ HIGH CVE-2022-30632
https://scout.docker.com/v/CVE-2022-30632
Affected range : <1.17.12
Fixed version : 1.17.12

✗ HIGH CVE-2022-30631
https://scout.docker.com/v/CVE-2022-30631
Affected range : <1.17.12
Fixed version : 1.17.12

✗ HIGH CVE-2022-30630
https://scout.docker.com/v/CVE-2022-30630
Affected range : <1.17.12
Fixed version : 1.17.12

✗ HIGH CVE-2022-29804
https://scout.docker.com/v/CVE-2022-29804
Affected range : <1.17.11
Fixed version : 1.17.11

✗ HIGH CVE-2022-2880
https://scout.docker.com/v/CVE-2022-2880
Affected range : <1.18.7
Fixed version : 1.18.7

✗ HIGH CVE-2022-2879
https://scout.docker.com/v/CVE-2022-2879
Affected range : <1.18.7
Fixed version : 1.18.7

✗ HIGH CVE-2022-28327
https://scout.docker.com/v/CVE-2022-28327
Affected range : <1.17.9
Fixed version : 1.17.9

✗ HIGH CVE-2022-28131
https://scout.docker.com/v/CVE-2022-28131
Affected range : <1.17.12
Fixed version : 1.17.12

✗ HIGH CVE-2022-27664
https://scout.docker.com/v/CVE-2022-27664
Affected range : <1.18.6
Fixed version : 1.18.6

✗ HIGH CVE-2022-24921
https://scout.docker.com/v/CVE-2022-24921
Affected range : <1.16.15
Fixed version : 1.16.15

✗ HIGH CVE-2022-24675
https://scout.docker.com/v/CVE-2022-24675
Affected range : <1.17.9
Fixed version : 1.17.9

✗ HIGH CVE-2022-23772
https://scout.docker.com/v/CVE-2022-23772
Affected range : <1.16.14
Fixed version : 1.16.14

✗ HIGH CVE-2021-44716
https://scout.docker.com/v/CVE-2021-44716
Affected range : <1.16.12
Fixed version : 1.16.12

✗ HIGH CVE-2021-41772
https://scout.docker.com/v/CVE-2021-41772
Affected range : <1.16.10
Fixed version : 1.16.10

✗ HIGH CVE-2021-41771
https://scout.docker.com/v/CVE-2021-41771
Affected range : <1.16.10
Fixed version : 1.16.10

✗ HIGH CVE-2021-39293
https://scout.docker.com/v/CVE-2021-39293
Affected range : <1.16.8
Fixed version : 1.16.8

✗ HIGH CVE-2023-29400
https://scout.docker.com/v/CVE-2023-29400
Affected range : <1.19.9
Fixed version : 1.19.9

✗ HIGH CVE-2023-24539
https://scout.docker.com/v/CVE-2023-24539
Affected range : <1.19.9
Fixed version : 1.19.9

✗ MEDIUM CVE-2023-29406
https://scout.docker.com/v/CVE-2023-29406
Affected range : <1.19.11
Fixed version : 1.19.11

✗ MEDIUM CVE-2022-32148
https://scout.docker.com/v/CVE-2022-32148
Affected range : <1.17.12
Fixed version : 1.17.12

✗ MEDIUM CVE-2022-1705
https://scout.docker.com/v/CVE-2022-1705
Affected range : <1.17.12
Fixed version : 1.17.12

✗ MEDIUM CVE-2023-39319
https://scout.docker.com/v/CVE-2023-39319
Affected range : <1.20.8
Fixed version : 1.20.8

✗ MEDIUM CVE-2023-39318
https://scout.docker.com/v/CVE-2023-39318
Affected range : <1.20.8
Fixed version : 1.20.8

✗ MEDIUM CVE-2021-36221
https://scout.docker.com/v/CVE-2021-36221
Affected range : >=1.16.0-0
: <1.16.7
Fixed version : 1.16.7

✗ MEDIUM CVE-2022-1962
https://scout.docker.com/v/CVE-2022-1962
Affected range : <1.17.12
Fixed version : 1.17.12

✗ MEDIUM CVE-2023-29409
https://scout.docker.com/v/CVE-2023-29409
Affected range : <1.19.12
Fixed version : 1.19.12

✗ MEDIUM CVE-2023-24532
https://scout.docker.com/v/CVE-2023-24532
Affected range : <1.19.7
Fixed version : 1.19.7

✗ MEDIUM CVE-2022-41717
https://scout.docker.com/v/CVE-2022-41717
Affected range : <1.18.9
Fixed version : 1.18.9

✗ MEDIUM CVE-2022-29526
https://scout.docker.com/v/CVE-2022-29526
Affected range : <1.17.10
Fixed version : 1.17.10

✗ MEDIUM CVE-2021-44717
https://scout.docker.com/v/CVE-2021-44717
Affected range : <1.16.12
Fixed version : 1.16.12

✗ LOW CVE-2022-30629
https://scout.docker.com/v/CVE-2022-30629
Affected range : <1.17.11
Fixed version : 1.17.11

✗ UNSPECIFIED CVE-2023-45284
https://scout.docker.com/v/CVE-2023-45284
Affected range : <1.20.11
Fixed version : 1.20.11

✗ UNSPECIFIED CVE-2023-45283
https://scout.docker.com/v/CVE-2023-45283
Affected range : <1.20.11
Fixed version : 1.20.11

0C 2H 0M 0L golang.org/x/net 0.0.0-20210805182204-aaa1db679c0d
pkg:golang/golang.org/x/net@0.0.0-20210805182204-aaa1db679c0d

✗ HIGH CVE-2022-27664
https://scout.docker.com/v/CVE-2022-27664
Affected range : <0.0.0-20220906165146-f3363e06e74c
Fixed version : 0.0.0-20220906165146-f3363e06e74c
CVSS Score : 7.5
CVSS Vector : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

✗ HIGH CVE-2021-44716
https://scout.docker.com/v/CVE-2021-44716
Affected range : <0.0.0-20211209124913-491a49abca63
Fixed version : 0.0.0-20211209124913-491a49abca63

0C 2H 0M 0L golang.org/x/crypto 0.0.0-20210711020723-a769d52b0f97
pkg:golang/golang.org/x/crypto@0.0.0-20210711020723-a769d52b0f97

✗ HIGH CVE-2022-27191 [Use of a Broken or Risky Cryptographic Algorithm]
https://scout.docker.com/v/CVE-2022-27191
Affected range : <0.0.0-20220314234659-1baeb1ce4c0b
Fixed version : 0.0.0-20220314234659-1baeb1ce4c0b
CVSS Score : 7.5
CVSS Vector : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

✗ HIGH CVE-2021-43565
https://scout.docker.com/v/CVE-2021-43565
Affected range : <0.0.0-20211202192323-5770296d904e
Fixed version : 0.0.0-20211202192323-5770296d904e
CVSS Score : 7.5
CVSS Vector : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

0C 2H 0M 0L github.com/apache/thrift 0.0.0-20181211084444-2b7365c54f82
pkg:golang/github.com/apache/thrift@0.0.0-20181211084444-2b7365c54f82

✗ HIGH CVE-2019-0210
https://scout.docker.com/v/CVE-2019-0210
Affected range : >=0.0.0-20151001171628-53dd39833a08
: <0.13.0
Fixed version : 0.13.0

✗ HIGH CVE-2019-0205 [OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities]
https://scout.docker.com/v/CVE-2019-0205
Affected range : <0.0.0-20191011170555-cecee50308fc
Fixed version : 0.0.0-20191011170555-cecee50308fc
CVSS Score : 7.5
CVSS Vector : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

0C 1H 2M 0L python3 3.6.8-51.el8_8.1
pkg:rpm/redhatlinux/python3@3.6.8-51.el8_8.1?os_name=redhatlinux&os_version=8

✗ HIGH CVE-2023-40217 [Authentication Bypass by Primary Weakness]
https://scout.docker.com/v/CVE-2023-40217
Affected range : <3.6.8-51.el8_8.2
Fixed version : 3.6.8-51.el8_8.2
CVSS Score : 8.6
CVSS Vector : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N

✗ MEDIUM CVE-2007-4559 [Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')]
https://scout.docker.com/v/CVE-2007-4559
Affected range : >=0
Fixed version : not fixed
CVSS Score : 5.5
CVSS Vector : CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

✗ MEDIUM CVE-2023-27043 [Improper Input Validation]
https://scout.docker.com/v/CVE-2023-27043
Affected range : >=0
Fixed version : not fixed
CVSS Score : 5.3
CVSS Vector : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

0C 1H 2M 0L pip 9.0.3
pkg:pypi/pip@9.0.3

✗ HIGH CVE-2019-20916 [Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')]
https://scout.docker.com/v/CVE-2019-20916
Affected range : <19.2
Fixed version : 19.2
CVSS Score : 7.5
CVSS Vector : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

✗ MEDIUM CVE-2021-3572 [Improper Input Validation]
https://scout.docker.com/v/CVE-2021-3572
Affected range : <21.1
Fixed version : 21.1
CVSS Score : 5.7
CVSS Vector : CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N

✗ MEDIUM CVE-2023-5752 [Improper Neutralization of Special Elements used in a Command ('Command Injection')]
https://scout.docker.com/v/CVE-2023-5752
Affected range : <23.3
Fixed version : 23.3
CVSS Score : 5.5
CVSS Vector : CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

0C 1H 1M 0L google.golang.org/grpc 1.39.1
pkg:golang/google.golang.org/grpc@1.39.1

✗ HIGH GHSA-m425-mq94-257g
https://scout.docker.com/v/GHSA-m425-mq94-257g
Affected range : <1.56.3
Fixed version : 1.56.3
CVSS Score : 7.5
CVSS Vector : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

✗ MEDIUM CVE-2023-44487 [Uncontrolled Resource Consumption]
https://scout.docker.com/v/CVE-2023-44487
Affected range : <1.56.3
Fixed version : 1.56.3
CVSS Score : 5.3
CVSS Vector : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

0C 1H 0M 0L setuptools 39.2.0
pkg:pypi/setuptools@39.2.0

✗ HIGH CVE-2022-40897 [Inefficient Regular Expression Complexity]
https://scout.docker.com/v/CVE-2022-40897
Affected range : <65.5.1
Fixed version : 65.5.1
CVSS Score : 7.5
CVSS Vector : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

0C 1H 0M 0L gopkg.in/yaml.v3 3.0.0-20210107192922-496545a6307b
pkg:golang/gopkg.in/yaml.v3@3.0.0-20210107192922-496545a6307b

✗ HIGH CVE-2022-28948 [Deserialization of Untrusted Data]
https://scout.docker.com/v/CVE-2022-28948
Affected range : <3.0.0-20220521103104-8f96da9f5d5e
Fixed version : 3.0.0-20220521103104-8f96da9f5d5e
CVSS Score : 7.5
CVSS Vector : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

0C 1H 0M 0L github.com/prometheus/client_golang 1.7.1
pkg:golang/github.com/prometheus/client_golang@1.7.1

✗ HIGH CVE-2022-21698 [Uncontrolled Resource Consumption]
https://scout.docker.com/v/CVE-2022-21698
Affected range : <1.11.1
Fixed version : 1.11.1
CVSS Score : 7.5
CVSS Vector : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

0C 1H 0M 0L golang.org/x/text 0.3.7
pkg:golang/golang.org/x/text@0.3.7

✗ HIGH CVE-2022-32149 [Missing Release of Resource after Effective Lifetime]
https://scout.docker.com/v/CVE-2022-32149
Affected range : <0.3.8
Fixed version : 0.3.8
CVSS Score : 7.5
CVSS Vector : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

0C 0H 1M 1L github.com/aws/aws-sdk-go 1.38.69
pkg:golang/github.com/aws/aws-sdk-go@1.38.69

✗ MEDIUM CVE-2020-8911
https://scout.docker.com/v/CVE-2020-8911
Affected range : >=0
Fixed version : not fixed

✗ LOW CVE-2020-8912
https://scout.docker.com/v/CVE-2020-8912
Affected range : >=0
Fixed version : not fixed

0C 0H 1M 0L 1? github.com/jaegertracing/jaeger 1.18.1
pkg:golang/github.com/jaegertracing/jaeger@1.18.1

✗ MEDIUM GHSA-2w8w-qhg4-f78j [Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')]
https://scout.docker.com/v/GHSA-2w8w-qhg4-f78j
Affected range : <1.47.0
Fixed version : 1.47.0
CVSS Score : 6.5
CVSS Vector : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

✗ UNSPECIFIED GMS-2023-1823 [OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities]
https://scout.docker.com/v/GMS-2023-1823
Affected range : =0
Fixed version : not fixed
CVSS Score : 5.3
CVSS Vector : CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H

0C 0H 1M 0L gcc 8.5.0-18.el8
pkg:rpm/redhatlinux/gcc@8.5.0-18.el8?os_name=redhatlinux&os_version=8

✗ MEDIUM CVE-2023-4039 []
https://scout.docker.com/v/CVE-2023-4039
Affected range : >=0
Fixed version : not fixed
CVSS Score : 4.8
CVSS Vector : CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N

0C 0H 1M 0L golang.org/x/sys 0.0.0-20210809222454-d867a43fc93e
pkg:golang/golang.org/x/sys@0.0.0-20210809222454-d867a43fc93e

✗ MEDIUM CVE-2022-29526 [Improper Privilege Management]
https://scout.docker.com/v/CVE-2022-29526
Affected range : <0.0.0-20220412211240-33da011f77ad
Fixed version : 0.0.0-20220412211240-33da011f77ad
CVSS Score : 5.3
CVSS Vector : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

0C 0H 1M 0L zlib 1.2.11-21.el8_7
pkg:rpm/redhatlinux/zlib@1.2.11-21.el8_7?os_name=redhatlinux&os_version=8

✗ MEDIUM CVE-2023-45853 [Heap-based Buffer Overflow]
https://scout.docker.com/v/CVE-2023-45853
Affected range : >=0
Fixed version : not fixed
CVSS Score : 5.3
CVSS Vector : CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

0C 0H 1M 0L python-pip 9.0.3-22.el8
pkg:rpm/redhatlinux/python-pip@9.0.3-22.el8?os_name=redhatlinux&os_version=8

✗ MEDIUM CVE-2018-25091 [Exposure of Sensitive Information to an Unauthorized Actor]
https://scout.docker.com/v/CVE-2018-25091
Affected range : >=0
Fixed version : not fixed
CVSS Score : 6.1
CVSS Vector : CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

0C 0H 0M 6L ncurses 6.1-9.20180224.el8_8.1
pkg:rpm/redhatlinux/ncurses@6.1-9.20180224.el8_8.1?os_name=redhatlinux&os_version=8

✗ LOW CVE-2020-19190 [Heap-based Buffer Overflow]
https://scout.docker.com/v/CVE-2020-19190
Affected range : >=0
Fixed version : not fixed
CVSS Score : 6.5
CVSS Vector : CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

✗ LOW CVE-2020-19188 [Stack-based Buffer Overflow]
https://scout.docker.com/v/CVE-2020-19188
Affected range : >=0
Fixed version : not fixed
CVSS Score : 6.5
CVSS Vector : CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

✗ LOW CVE-2020-19187 [Heap-based Buffer Overflow]
https://scout.docker.com/v/CVE-2020-19187
Affected range : >=0
Fixed version : not fixed
CVSS Score : 6.5
CVSS Vector : CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

✗ LOW CVE-2020-19186 [Out-of-bounds Read]
https://scout.docker.com/v/CVE-2020-19186
Affected range : >=0
Fixed version : not fixed
CVSS Score : 6.5
CVSS Vector : CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

✗ LOW CVE-2020-19185 [Heap-based Buffer Overflow]
https://scout.docker.com/v/CVE-2020-19185
Affected range : >=0
Fixed version : not fixed
CVSS Score : 6.5
CVSS Vector : CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

✗ LOW CVE-2021-39537 [Improper Restriction of Operations within the Bounds of a Memory Buffer]
https://scout.docker.com/v/CVE-2021-39537
Affected range : >=0
Fixed version : not fixed
CVSS Score : 5.5
CVSS Vector : CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

0C 0H 0M 2L curl 7.61.1-30.el8_8.3
pkg:rpm/redhatlinux/curl@7.61.1-30.el8_8.3?os_name=redhatlinux&os_version=8

✗ LOW CVE-2023-38546 [External Control of File Name or Path]
https://scout.docker.com/v/CVE-2023-38546
Affected range : >=0
Fixed version : not fixed
CVSS Score : 5.0
CVSS Vector : CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L

✗ LOW CVE-2023-28322 [Expected Behavior Violation]
https://scout.docker.com/v/CVE-2023-28322
Affected range : >=0
Fixed version : not fixed
CVSS Score : 3.7
CVSS Vector : CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

0C 0H 0M 1L shadow-utils 2:4.6-17.el8
pkg:rpm/redhatlinux/shadow-utils@2:4.6-17.el8?os_name=redhatlinux&os_version=8

✗ LOW CVE-2023-4641 [Incorrect Implementation of Authentication Algorithm]
https://scout.docker.com/v/CVE-2023-4641
Affected range : >=0
Fixed version : not fixed
CVSS Score : 4.7
CVSS Vector : CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

0C 0H 0M 1L tpm2-tss 2.3.2-4.el8
pkg:rpm/redhatlinux/tpm2-tss@2.3.2-4.el8?os_name=redhatlinux&os_version=8

✗ LOW CVE-2023-22745 [Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')]
https://scout.docker.com/v/CVE-2023-22745
Affected range : >=0
Fixed version : not fixed
CVSS Score : 6.4
CVSS Vector : CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

0C 0H 0M 1L openssl 1:1.1.1k-9.el8_7
pkg:rpm/redhatlinux/openssl@1:1.1.1k-9.el8_7?os_name=redhatlinux&os_version=8

✗ LOW CVE-2023-3446 [Uncontrolled Resource Consumption]
https://scout.docker.com/v/CVE-2023-3446
Affected range : >=0
Fixed version : not fixed
CVSS Score : 5.3
CVSS Vector : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

92 vulnerabilities found in 23 packages
UNSPECIFIED 3
LOW 13
MEDIUM 24
HIGH 49
CRITICAL 3

What's Next?
View base image update recommendations → docker scout recommendations cockroachdb/cockroach-operator:v2.12.0
```

Start by reproducing the reported docker scout cves cockroachdb/cockroach-operator:v2.12.0 scan and identify how the image obtains the listed Go, Python, and other packages. Trace those inputs in the repository, then update the affected dependencies or image components and rerun the scan; done means the critical vulnerabilities are addressed in the supported operator images.

Written by the indexing model from the issue text.