diff --git a/Dockerfile b/Dockerfile
index ad6bb71..57dc1b7 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -6,7 +6,7 @@ ARG Z7_VERSION=2301
 ARG BINUTILS_VERSION=2.45
 ARG BUSYBOX_VERSION=FRP-5579-g5749feb35
 ARG CTAGS_VERSION=6.0.0
-ARG EXPAT_VERSION=2.7.0
+ARG EXPAT_VERSION=2.7.2
 ARG GCC_VERSION=15.2.0
 ARG GDB_VERSION=16.2
 ARG GMP_VERSION=6.3.0
@@ -28,7 +28,7 @@ RUN curl --insecure --location --remote-name-all --remote-header-name \
     https://ftpmirror.gnu.org/gnu/binutils/binutils-$BINUTILS_VERSION.tar.xz \
     https://ftpmirror.gnu.org/gnu/gcc/gcc-$GCC_VERSION/gcc-$GCC_VERSION.tar.xz \
     https://ftpmirror.gnu.org/gnu/gdb/gdb-$GDB_VERSION.tar.xz \
-    https://downloads.sourceforge.net/project/expat/expat/$EXPAT_VERSION/expat-$EXPAT_VERSION.tar.xz \
+    https://github.com/libexpat/libexpat/releases/download/R_2_7_2/expat-$EXPAT_VERSION.tar.xz \
     https://ftpmirror.gnu.org/gnu/gmp/gmp-$GMP_VERSION.tar.xz \
     https://ftpmirror.gnu.org/gnu/mpc/mpc-$MPC_VERSION.tar.gz \
     https://ftpmirror.gnu.org/gnu/mpfr/mpfr-$MPFR_VERSION.tar.xz \
diff --git a/src/SHA256SUMS b/src/SHA256SUMS
index 44ed027..e8806c2 100644
--- a/src/SHA256SUMS
+++ b/src/SHA256SUMS
@@ -2,7 +2,7 @@
 c50c0e7f9cb188980e2cc97e4537626b1672441815587f1eab69d2a1bfbef5d2  binutils-2.45.tar.xz
 cde68932d0680939977344259182482341adfffac4558cd1592bc26d2b558311  busybox-w32-FRP-5579-g5749feb35.tgz
 71229a73f25529c9e3dabb2cb7310c55405d31caee8e8a9ab5c71b2406d4005a  ctags-6.0.0.tar.gz
-25df13dd2819e85fb27a1ce0431772b7047d72af81ae78dc26b4c6e0805f48d1  expat-2.7.0.tar.xz
+21b778b34ec837c2ac285aef340f9fb5fa063a811b21ea4d2412a9702c88995c  expat-2.7.2.tar.xz
 438fd996826b0c82485a29da03a72d71d6e3541a83ec702df4271f6fe025d24e  gcc-15.2.0.tar.xz
 4002cb7f23f45c37c790536a13a720942ce4be0402d929c9085e92f10d480119  gdb-16.2.tar.xz
 a3c2b80201b89e68616f4ad30bc66aee4927c3ce50e33929ca819d5c43538898  gmp-6.3.0.tar.xz