GHSA-fcqc-726x-5wfc: vm2: Sandboxed code can read and write host-realm memory via Node's shared Buffer pool

Sandboxed code is able to disclose host memory used by small allocations by Buffer.from, Buffer.concat. ### Details vm2 exposes Buffer object to sandboxed code by default. Small [Buffer allocations](https://nodejs.org/api/buffer.html#static-method-bufferallocunsafesize) (for example, [Buffer.allocUnsafe()](https://nodejs.org/api/buffer.html#static-method-bufferallocunsafesize), [Buffer.from(array)](https://nodejs.org/api/buffer.html#static-method-bufferfromarray), [Buffer.from(string)](https://nodejs.org/api/buffer.html#static-method-bufferfromstring-encoding), and [Buffer.