vm2: bufferAllocLimit cap bypassed by Buffer.concat and Buffer.from arrayLike (CVE-2026-47683) | HOL Guard CVE