Electrum: update to 4.8.3 after a hostile server faked a stuck payment
3 for a high-severity bug. A hostile server can hide a transaction you broadcast and show a fake one. A fee bump on that fake payment can pay the attacker. Electrum says two users reported it and one loss is confirmed.
The amount was not stated. 3 are affected. People connected only to their own server are not exposed. Research snapshot from Electrum's advisory.
369 take
Update from electrum.org only. Before you bump a fee, read the full address and the amount on the screen you are about to sign.
Sources