To fix CVE-2017-11742, Expat 2.2.3 has an additional file that must be compiled in Windows. https://www.cvedetails.com/cve/CVE-2017-11742/