GHSA-647F-G98J-QQ25 vm2: GHSA-m283-3h24-438v fix bypass leads to host RCE via call/apply indirection

Summary Untrusted JavaScript run by vm2 can escape the sandbox and execute arbitrary commands in the host Node.js process when an embedder-exposed host Promise rejects. This is an incomplete fix for GHSA-m283-3h24-438v: the advisory's capability-bearing rejection rebuild runs only through this...