There's a long list of alerts at https://github.com/NREL/OpenStudio-PAT/security/dependabot
There's a long list of alerts at https://github.com/NREL/OpenStudio-PAT/security/dependabot