GO-2023-1573 Memory exhaustion via OCI image importer in github.com/containerd/containerd

When importing an OCI image, there was no limit on the number of bytes read from the io.Reader passed into ImportIndex. A large number of bytes could be read from this and could cause a denial of service...