diff --git a/components/expat/expat b/components/expat/expat
index 57c7da69b7..3bab6c09bb 160000
--- a/components/expat/expat
+++ b/components/expat/expat
@@ -1 +1 @@
-Subproject commit 57c7da69b78e3698e112a6b5da19d5109b8232d1
+Subproject commit 3bab6c09bbe8bf42d84b81563ddbcf4cca4be838
diff --git a/components/expat/port/include/expat_config.h b/components/expat/port/include/expat_config.h
index 468910220f..42acb52a5c 100644
--- a/components/expat/port/include/expat_config.h
+++ b/components/expat/port/include/expat_config.h
@@ -63,7 +63,7 @@
 #define PACKAGE_NAME "expat"
 
 /* Define to the full name and version of this package. */
-#define PACKAGE_STRING "expat 2.4.3"
+#define PACKAGE_STRING "expat 2.4.8"
 
 /* Define to the one symbol short name of this package. */
 #define PACKAGE_TARNAME "expat"
@@ -72,13 +72,13 @@
 #define PACKAGE_URL ""
 
 /* Define to the version of this package. */
-#define PACKAGE_VERSION "2.4.3"
+#define PACKAGE_VERSION "2.4.8"
 
 /* Define to 1 if you have the ANSI C header files. */
 #define STDC_HEADERS 1
 
 /* Version number of package */
-#define VERSION "2.4.3"
+#define VERSION "2.4.8"
 
 /* whether byteorder is bigendian */
 /* #undef WORDS_BIGENDIAN */