Integer MAX value is recognised as malicius

Description

During testing we noticed that Integer MAX value (2,147,483,647) is blocked as malicious, but this is valid number.

It looks like this is rule which is causing issue
https://github.com/coreruleset/coreruleset/blob/2c67856251fc90dcaf07f581ecdd484ec215248b/rules/REQUEST-942-APPLICATION-ATTACK-SQLI.conf#L227-L254

and following is pattern
(?:429496729[56]|2(?:14748364[78]|.22507385850720(?:07|11)e-308)|-(?:214748364[89]|0000023456)|00000(?:12345|23456)|1e309)$"

How to reproduce the misbehavior (-> curl call)

In order to reproduce you can execute below endpoint on Sandbox

GET https://sandbox.coreruleset.org/?size=2147483647

That call is producing 403 error

"response": {
    "protocol": "HTTP/1.1",
    "status": 403,
    "headers": {
      "X-Unique-ID": "anXOUIi1kw0Lu7niovrHaQAAAAo",
      "Content-Length": "199",
      "Connection": "close",
      "Content-Type": "text/html; charset=iso-8859-1"
    },
...

While call which has value less then maximum will work as expected

GET /path/to/endpoint?size=](https://sandbox.coreruleset.org/?size=2147483646
would return expected response

  "response": {
    "protocol": "HTTP/1.1",
    "status": 200,
    "headers": {
      "X-Unique-ID": "anXOupe8YeMA0RqZQSZjuAAAARQ",
      "Access-Control-Allow-Credentials": "true",
      "Access-Control-Allow-Origin": "*",
      "Content-Security-Policy": "default-src 'self'; style-src 'self' 'unsafe-inline'; img-src 'self' camo.githubusercontent.com",
      "Content-Type": "text/html; charset=utf-8",
      "Content-Length": "13363",
      "Connection": "close"
    },
...

Confirmation

[x ] I have removed any personal data (email addresses, IP addresses,
passwords, domain names) from any logs posted.

Start with the linked rule in REQUEST-942-APPLICATION-ATTACK-SQLI.conf and inspect the pattern around the reported match. Reproduce the behavior with the sandbox curl requests using size=2147483647 and size=2147483646, then verify that the valid maximum value is accepted without weakening the rule's intended malicious-value detection.