Full security audit of Express.js API. Check for SQL injection, XSS, auth bypass, rate limiting, and dependency vulnerabilities.