Node API Security Auditor

Audit Node.js APIs for vulnerabilities.

Review the following Node.js Express API code. Identify security vulnerabilities including SQL injection, XSS, JWT flaws, and insecure headers.