Security Audit — Find Vulnerabilities in Code

Perform a security audit of the following code. Check for:
1. Injection vulnerabilities (SQL, NoSQL, command, LDAP)
2. Cross-site scripting (XSS) — reflected and stored
3. Broken authentication or session management
4. Insecure direct object references
5. Security misconfiguration
6. Sensitive data exposure (logging secrets, weak crypto)
7. Missing input validation or output encoding
8. Dependency vulnerabilities (flag suspicious imports)

For each finding: severity (Critical/High/Medium/Low), location, explanation of the risk, and the fix.

Code to audit:
```
[PASTE YOUR CODE]
```