Laravel apps (in general) are safe from the CVE-2026-115560 CVE, since Laravel does not use PHP's native session serializer.
There's no action needed for Laravel apps, unless you have packages or custom code using PHP's native session handler
commit b42e1e3