CMake bundles vulnerable copy of Expat - please update to (2.2.8 or) 2.2.9
Please update the outdated vulnerable copy of Expat 2.2.7 at Utilities/cmexpat/lib. Please check the change log of Expat for more details.
Thank you!
Edited by Sebastian Pipping