most of the vulnerabilities are duplicates of the same packages. they all fall into the category of "if dendron were a remote service, they could potentially cause denial of service due to improper checking of file size/regex"