CVE-2026-92938: Sandbox Host Builtin Readonly Wrap Unsanitizedcve-2026-92938-sandbox-host-builtin-readonly-wrap-unsanitized
A host builtin module is handed to sandbox code through the read-only proxy wrap without first passing it through a member-sanitizing call. The read-only proxy only blocks property assignment; its get/apply traps forward every method call to the real host object with full host authority. Any host-authority callable on that module (e.g. a constructor/option t
