TinyFileManager v2.6 is vulnerable to Server-Side Request Forgery (SSRF), I sent a report at security section of this repo. Regards!