NPM: vm2: NodeVM builtin denylist bypass via fs/promises despite -fs, allowing host filesystem writes

NPM: vm2: NodeVM builtin denylist bypass via fs/promises despite -fs, allowing host filesystem writes vulnerability discovered by ? in WordPress Npm vm2 versions = 3.11.6...