{"action":"Upgrade squid to 2.6.5-6 or later.","affected":[{"fixed":"2.6.5-6","introduced":"0"}],"component":"squid","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:12","exploited":false,"fixed_versions":["2.6.5-6"],"id":"tcs_01M5N8S03K45H1VG3C1S9P6CYB","modified_at":"2026-10-21T17:47:34.459717313Z","published_at":"2007-03-21T18:19:00Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2007-1560","https://security-tracker.debian.org/tracker/CVE-2007-1560"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2007-1560","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2007-1560"}],"summary":"The clientProcessRequest() function in src/client_side.c in Squid 2.6 before 2.6.STABLE12 allows remote attackers to cause a denial of service (daemon crash) via crafted TRACE requests that trigger an"}