Vulnerable code sample

import base64
import random
from cryptography.fernet import Fernet

def get_encryption_key(secret: str) -> bytes:
    """
    Generates a Fernet encryption key from a user secret. If the secret is
    shorter than 32 bytes, it's used to seed a PRNG to generate the key.
    """
    secret_bytes = secret.encode('utf-8')

    if len(secret_bytes) >= 32:
        key_material = secret_bytes[:32]
    else:
        # VULNERABLE: The 'random' module is not cryptographically secure and uses a deterministic PRNG.
        random.seed(secret_bytes)
        key_material = random.randbytes(32)

    return base64.urlsafe_b64encode(key_material)

def store_api_key(api_key: str, secret: str):
    """
    Encrypts an API key for storage using a key derived from the user secret.
    """
    key = get_encryption_key(secret)
    f = Fernet(key)
    encrypted_api_key = f.encrypt(api_key.encode('utf-8'))
    # e.g., db.execute("INSERT INTO secrets (data) VALUES (?)", (encrypted_api_key,))