Template injection in connection test endpoint leads to RCE in GitHub repository sqlpad/sqlpad before 6.10.1.
sqlpad sqlpad