SEC004
Weak random number usage
Object Pascal — Delphi & Free Pascal
Warning
Security
Weak randomness is unsafe for tokens, keys, or security decisions
weak randomness is unsafe for tokens, keys, or security decisions.
Why this severity
weak randomness is unsafe for tokens, keys, or security decisions.
Known false positives
non-security usage such as UI shuffling.
Remediation example
// Use cryptographic RNG for tokens, not Random(). Token := CreateSecureToken(32);