vm2: Sandbox Escape via Promise Constructor Unhandled Rejection (Process Crash DoS) (CVE-2026-44001) | HOL Guard CVE