AIKIDO-2026-10689

TL;DR

With nesting: true, the resolver path merges a nesting override that always exposes the vm2 builtin into the sandbox module graph even when the host chose require: false to deny every module. Sandbox code can therefore require('vm2'), construct a fresh inner NodeVM with its own require policy including host builtins such as child_process, and run operating-system commands outside the intended isolation. The patch rejects the contradictory option pair at construction time with a clear VMError so embedders cannot silently build a host-equivalent environment while believing require is fully disabled.