Summary of changes:

• CVE-2025-58137: auth bypass through user-controlled key

• CVE-2025-58130: insufficiently protected credentials

See also:

• Download
• https://github.com/apache/fineract/releases/tag/1.12.1
• https://github.com/apache/fineract/compare/1.11.0...1.12.1
• 

Issues resolved: