A security analysis tool is reporting a security vulnerability in expat 2.5.

https://nvd.nist.gov/vuln/detail/CVE-2024-45492
https://nvd.nist.gov/vuln/detail/CVE-2024-45491
https://nvd.nist.gov/vuln/detail/CVE-2024-45490

DEP:

According to #91384 (comment) "it's only used for parsing the font file on Android" so we don't actually believe there's a live security issue.

Skia is on sha libexpat/libexpat@8e49998 as of 2 weeks ago:
https://skia-review.googlesource.com/c/skia/+/994776

See related issues #114734, #91384, and the last time it rolled flutter/engine#37383
Autoroll feature request: #114817