Replacing gson-2.8.5.jar in the Fhir extension for Mirth

[debashish]

Hi,
We are using Mirth as our ETL tool and have been extensively using FHIR extension provided by Mirth fhir-3.11.0.b1424.zip.
But recently our static code analysis tool reported a high vulnerability on gson-2.8.5.jar and suggested to be replaced by gson-2.9.0.jar .
I was able to update the extension .zip file with the new jar by replacing the gson jar and changing 3 config files that referred to it .
When I start the server it starts up correctly and deploys all the channels. But when I try to run the admin console it gives the attached error trying to validate the manifest file.
Have anybody faced this issue ? Is there a latest fhir extension avaiable that can be downloaded ?

Thanks

[pacmano]

Do read github now also. Similar problem, diff library. https://github.com/nextgenhealthcare...scussions/5231

[siddharth]

Yeah. Jar is not signed.

[debashish]

Thanks guys for your suggestions . I was able to self sign the gson-2.9.0.jar and add it to the FHIR extension zip file . Got it working from the Admin Console with a warning pop up .