The https://github.com/dotnet/source-build-reference-packages repo defines NuGet.Commands.6.2.2 which is triggering component governance for CVE-2023-29337.

Related to #3542