jackson-core -- StreamReadConstraints can be bypassed

The Jackson project reports:

Enforce maxNameLength incrementally in ReaderBasedJsonParser

Fail parsing from DataInput if StreamReadConstraints.getMaxDocumentLength() set

Fix maxDocumentLength bypass in async parser single feedInput() case

Enforce StreamReadConstraints.maxNumberLength for non-blocking (async) parser

UTF8DataInputJsonParser needs to enforce StreamReadConstraints.maxNameLength limit

[source]