In older versions (< v2026), firebase/php-jwt is used by JWT (REST API). If you check packagist.org, you'll see that all versions < v7 has security issues, so you need to upgrade to v7.
To change the versions, you can use Tools -> Composer Packages to add "firebase/php-jwt" and set the version as "v7.0.0".