There is a list of NTP vulnerabilities in this article. If you're interested in a more secure NTP client we've been building one:

https://github.com/memorysafety/ntpd-rs

Server functionality and NTS support is on the way.