SSTI/code injection in fsspec ReferenceFileSystem: Kerchunk reference JSON fields are rendered via unrestricted jinja2.Template(…).render(…) in fsspec/implementations/reference.py (_process_references1._render_jinja, _process_templates, _process_gen). Attacker-supplied inline refs or refs fetched from attacker-controlled URLs can execute Python when opening the FS (e.g., via xarray). Affects `>=0.9.0,