security update to boxes module