Microsoft.AspNetCore.Authentication.OpenIdConnect should be updated to a non-deprecated version. The version that's referenced here includes System.IdentityModel.Tokens.Jwt and Microsoft.IdentityModel.JsonWebTokens 5.5.0, both of which are marked as vulnerable as per GHSA-59j7-ghrg-fj52.