# Umami v3.0.2

- Product: Umami (https://whatsnew.fyi/product/umami)
- Vendor: Umami Software
- Date: 2025-12-04
- Version: v3.0.2
- Original notes: https://github.com/umami-software/umami/releases/tag/v3.0.2
- Permalink: https://whatsnew.fyi/product/umami/releases/v3.0.2

What's New is an index, not a publisher: every entry below links to the vendor's own release notes, which are the authoritative source. Entries are labelled where they are hand-curated sample data, pre-releases, or drawn from a secondary source such as a developer blog.

Reuse: the summaries, labels and curation here are © What's New. Quote freely with attribution and a link back; wholesale republication of the corpus is not permitted — terms: https://whatsnew.fyi/terms. The vendors' own release notes remain their publishers'.

---

- **security** — Address Next.js CVE-2025-66478 critical vulnerability in RSC
- **fixed** — Time range selection back and forward arrows not jumping with correct steps
- **fixed** — Links and Pixels are prefetched on dashboard
- **fixed** — Chart legend extends beyond container boundaries when URL is too long, disrupting page layout
- **fixed** — User is not able to switch back to My Account after switching to the Team
- **fixed** — Reset of website stats is not possible after entries in Revenue table
- **fixed** — Team workspace is not selectable after login
- **fixed** — Error with long UTM parameters and click IDs
- **fixed** — Direct visitors are missing on Channels
- **fixed** — Last seen and First seen fields broken
- **fixed** — Tests are failing
- **fixed** — Revenue sums not showing
- **fixed** — Read-only prevents user from joining team
- **fixed** — URL theme and lang parameters no longer work for public share links
- **changed** — Next.js updated to 15.5.7
- **changed** — Prisma updated to 6.19.0

This is a patch release to address the Next.js [CVE](https://nextjs.org/blog/CVE-2025-66478) and fixes many bugs.

##### Fixes
- Nextjs/RSC critical vulnerability #3829
- Time range selection back and forward arrows not jumping with correct steps #3828
- Links and Pixels are prefetched on dashboard #3814
- In the chart legend, when the URL is too long, the legend extends beyond the container boundaries, disrupting the page layout. #3813
- User is not able to switch back to My Account after switching to the Team #3802
- Reset of website stats is not possible after entries in Revenue table #3798
- Team workspace is not selectable after login #3796
- Error with long UTM parameters and click IDs #3790
- Direct visitors are missing on Channels (3.0.1) #3789
- "Last seen" - "First seen" fields broken since 3.0.1 #3775
- Tests are failing in 3.0.1 #3773
- Revenue sums not showing in 3.0.1 #3769
- Read-only prevents user from joining team #3764
- Regression: URL theme and lang parameters no longer work for public share links #3754

##### Updates
- Next.js `15.5.7`
- Prisma `6.19.0`

##### Thanks
@Lokimorty @imsyedabdullah @RaenonX @IndraGunawan