Language: TypeScript
Label: safe
CWE: CWE-331 \u2014 Insufficient Entropy
The product uses an algorithm or scheme that produces insufficient entropy, leaving patterns or clusters of values that are more likely to occur than others.

Code:
  setCipherKey(val, setup, modules) {
    this.cipherKey = val;
    if (this.cipherKey) {
      this.cryptoModule =
        setup.cryptoModule ?? setup.initCryptoModule({ cipherKey: this.cipherKey, useRandomIVs: this.useRandomIVs });
      if (modules) modules.cryptoModule = this.cryptoModule;
    }
    return this;
  }