vm2 has a sandbox escape via unblocked cross-realm Symbol.for keys + missing bridge write-trap symbol checks (CVE-2026-47135) | HOL Guard CVE