Deno: `fetch()` API sandbox bypass via missing DNS resolution check (CVE-2026-49859) | HOL Guard CVE