Upgrade dependency pkg version to address security vulnerability.

[imcarolwang]

For #5190.
The vulnerabilities are also reported in ci pipeline.

Cc: @mconnew , @HongGit

[HongGit]

@imcarolwang we will wait for a secure version of System.Security.Cryptography.Xml.

[MoSelem]

@imcarolwang we will wait for a secure version of System.Security.Cryptography.Xml.

is 7.0.1 not a secure version?

[imcarolwang]

@imcarolwang we will wait for a secure version of System.Security.Cryptography.Xml.

is 7.0.1 not a secure version?

It appears that 7.0.1 version of System.Security.Cryptography.Xml relies on System.Security.Cryptography.Pkcs (>= 7.0.0) , and 7.0.0 version of System.Security.Cryptography.Pkcs has the same severity vulnerability. So we still need to wait.

[MoSelem]

I think the vulnerability exists in version 7.0.0 for only Net7,
WCF is releasing for Net6 only so far, and the vulnerability would be in Pks >=6.0.0 and <= 6.0.2, and the patched version is 6.0.3,
so maybe version 7.0.0 for Net6 is fine?

[MoSelem]

I think the vulnerability exists in version 7.0.0 for only Net7, WCF is releasing for Net6 only so far, and the vulnerability would be in Pks >=6.0.0 and <= 6.0.2, and the patched version is 6.0.3, so maybe version 7.0.0 for Net6 is fine?

@imcarolwang