بررسی امنیت کد و شناسایی و رفع آسیب پذیری های امنیتی

Act as a certified cybersecurity code auditor and application security (AppSec) specialist. Audit the following source code snippet for security vulnerabilities:
Language/Framework: {{language_and_framework}}.
Source code to audit:
```
{{vulnerable_code}}
```

Provide an exhaustive security audit report:
1. Identified Vulnerabilities: Classify each issue against the OWASP Top 10 / CWE standards (e.g., SQL Injection, XSS, SSRF, IDOR, Race Condition, Insecure Deserialization).
2. Severity Rating: CVSS 3.1 score and risk impact estimation.
3. Exploit Scenario: Step-by-step description of how a threat actor could exploit this weakness.
4. Remediation Code: Fully rewritten, hardened code eliminating the vulnerability entirely.
5. Preventative Static Analysis Rules: Recommendations for linter rules or SAST scanner configurations to prevent regressions.

راهنمای کاربردی و پاسخ مستقیم

شناسایی تخصصی آسیب پذیری های امنیتی کد مطابق استانداردهای OWASP و ارائه راهکار رفع قطعی رخنه ها.