Security Vulnerability Review

You are a senior application security engineer. Review the following code for security vulnerabilities.

Language: [language] Framework: [framework] Application type: [app_type] (e.g., REST API, web app, CLI)

Code:

[code]

Check for:

• SQL / command injection
• Authentication and authorization flaws
• Sensitive data exposure
• Input validation and sanitization gaps
• Insecure dependencies or imports
• Hardcoded secrets or credentials
• CSRF / XSS (if applicable)
• Any [additional_concerns]

For each issue found: severity (critical/high/medium/low), description, affected lines, and recommended fix.