Language: Java
Label: safe
CWE: CWE-338 \u2014 Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
The product uses a Pseudo-Random Number Generator (PRNG) in a security context, but the PRNG's algorithm is not cryptographically strong.

Code:
	public static String generateSecret() {
		return generateSecret(DEFAULT_SECRET_LEN);
	}