linkml-map required an update due to a critical CVE with one of it's dependencies (deepdiff)
They have created release candidate v0.3.9-rc2 for this. Once this is released, kgx will need to update it's dependencies to include this fix in order for it to be "CVE free".