According to Google, pages with different url parameters but the same content, are considered duplicate pages and can cause indexing issues or keywords cannibalization.
https://support.google.com/webmasters/answer/6080548?hl=en
It is advisable to use nofollow for links that create pages with the same content.
The use of nofollow is now of less "SEO value" than it used to be. See https://www.searchenginejournal.com/google-nofollow-hints-seo/325363
The use of canonical URLs as used in VM is, IMHO, more valuable.
Jenkinhill the addition of the new attributes does not deprecate the nofollow. Also still seems the most appropriate for internal links.
Anyway this needs to be handled.