langgraph-api:3.14 image contains vulnerable benchmark-only npm dependencies

Checked other resources

• This is a bug, not a usage question.
• I added a clear and descriptive title that summarizes this issue.
• I used the GitHub search to find a similar question and didn't find it.
• I am sure that this is a bug in LangGraph rather than my code.
• The bug is not resolved by updating to the latest stable version of LangGraph (or the specific integration package).
• This is not related to the langchain-community package.
• I posted a self-contained, minimal, reproducible example. A maintainer can copy it and run it AS IS.

Related Issues / PRs

No related public LangGraph issue or pull request found.

Reproduction Steps / Example Code (Python)

import shutil
import subprocess

image = (
    "langchain/langgraph-api:3.14@"
    "sha256:647a0a639deabf60a6ab3a73b6f306cd96ddbd9815643d123a60c0f42c3ed905"
)

for command in ("docker", "trivy"):
    if shutil.which(command) is None:
        raise RuntimeError(f"{command} must be installed")

subprocess.run(["docker", "pull", image], check=True)
subprocess.run(
    [
        "trivy",
        "image",
        "--scanners",
        "vuln",
        "--severity",
        "HIGH",
        image,
    ],
    check=True,
)

Error Message and Stack Trace (if applicable)

No Python exception or stack trace is produced. Trivy reports 21 HIGH
vulnerability findings from npm dependencies contained in inherited
benchmark/development assets.

multer 1.4.4-lts.1
Fixed version: 2.3.0
CVE-2025-47935, CVE-2025-47944, CVE-2025-48997, CVE-2025-7338,
CVE-2026-2359, CVE-2026-3304, CVE-2026-3520, CVE-2026-5079,
CVE-2026-77078, CVE-2026-82333

ws 8.2.3
Fixed version: 8.21.0
CVE-2024-37890, CVE-2026-45736, CVE-2026-48779

path-to-regexp 0.1.7
Fixed version: 0.1.13
CVE-2024-45296, CVE-2024-52798, CVE-2026-4867

browserslist 4.28.1
Fixed version: 4.28.7
CVE-2026-73088, CVE-2026-73089

body-parser 1.20.0
Fixed version: 1.20.3
CVE-2024-45590

engine.io 6.2.1
Fixed version: 6.6.7
CVE-2026-59725

socket.io 4.5.1
Fixed version: 4.6.2
CVE-2024-38355

Description

The official langchain/langgraph-api:3.14 image contains vulnerable npm dependencies in inherited benchmark/development assets, including content under /api/benchmark.

Affected image:

langchain/langgraph-api:3.14 sha256:647a0a639deabf60a6ab3a73b6f306cd96ddbd9815643d123a60c0f42c3ed905

These assets do not appear necessary for normal LangGraph API operation. Downstream applications currently need to remove /api/benchmark and inherited development dependency metadata from their final images to prevent these packages from being reported by container scanners.

Expected behavior:

The production image should exclude non-runtime benchmark/development assets, or their dependency trees should use patched versions.

Current behavior:

Container vulnerability scanners detect 21 HIGH findings associated with the npm packages listed above.

Could you please remove these non-runtime assets from the published image or update their dependency tree, and provide the tag and digest of a remediated image?

This report identifies vulnerable artifacts and unnecessary image attack surface. It does not claim that these packages currently have a remotely exploitable runtime path.

System Info

System Information

OS: Linux OS Version: #1 SMP Sat May 17 08:28:57 UTC 2025 Python Version: 3.14.7 (main, Aug 31 2026, 23:42:40) [GCC 14.2.0]

Package Information

langchain_core: 1.4.8 langsmith: 0.8.18 langchain_protocol: 0.0.18 langgraph_api: 0.14.1 langgraph_grpc_common: 0.1.0 langgraph_sdk: 0.4.4

Optional packages not installed

deepagents deepagents-cli

Other Dependencies

cloudpickle: 3.1.2 cryptography: 50.0.0 grpcio: 1.81.1 grpcio-health-checking: 1.81.1 grpcio-tools: 1.81.1 httptools: 0.7.1 httpx: 0.28.1 jsonpatch: 1.33 jsonschema-rs: 0.44.1 langgraph: 1.2.6 langgraph-checkpoint: 4.2.0 opentelemetry-api: 1.42.1 opentelemetry-exporter-otlp-proto-http: 1.42.1 opentelemetry-exporter-prometheus: 0.63b1 opentelemetry-sdk: 1.42.1 orjson: 3.11.9 packaging: 26.2 prometheus-client: 0.25.0 protobuf: 6.33.6 pydantic: 2.13.4 pyjwt: 2.13.0 pyyaml: 6.0.3 requests: 2.34.2 requests-toolbelt: 1.0.0 sse-starlette: 3.3.4 starlette: 1.3.1 structlog: 25.5.0 tenacity: 9.1.4 truststore: 0.10.4 typing-extensions: 4.15.0 uuid-utils: 0.16.2 uvicorn: 0.47.0 uvloop: 0.22.1 watchfiles: 1.2.0 websockets: 15.0.1 xxhash: 3.7.0 zstandard: 0.25.0