CVE-2026-47139: Node Builtin Modules Underscore Bypasscve-2026-47139-node-builtin-modules-underscore-bypass
Filtering Node.js builtin modules without excluding undocumented underscored modules (e.g., `_http_client`, `_http_server`) can allow sandbox bypasses. Underscored modules expose underlying network or system primitives directly and often circumvent restrictions placed on public modules. Ensure that elements starting with `_` are also filtered out.