Blog

CommandBox Docker v3.6.3 Images Released

Jon Clausen December 08, 2022

Spread the word

Jon Clausen

December 08, 2022

Spread the word


Share your thoughts

CommandBox 3.6.3 Docker images released



Today we are pleased to announce the release of version 3.6.3 of our CommandBox Docker images.

This release upgrades the CommandBox binary to 5.7.0. Read the Release Notes for this version here. Also added in this version, are new distro builds for the RHEL Universal Base Image. These images may be utilized by using the ubi9 in the image tag in the same way the alpine base images currently do. Examples:

  • :ub9
  • :lucee5-ubi9
  • :adobe2021-ubi9

From this release forward, Adobe 2016 ( :adobe2016 ) images are no longer being built as that product has passed EOL. You may still use this engine by specifying BOX_SERVER_APP_CFENGINE=adobe@2016 from the :jdk8 base image to run this version.

Changelog for this version - versions denote `[CommandBox binary version ]/[ image version ]:

[5.7.0/3.6.3] - 2022-12-07

Added

  • Added RHEL ubi9 Builds with tags: ubi9, jre-11-ubi9, jdk-11-ubi9, lucee5-ubi9, adobe2018-ubi9, and adobe2021-ubi9

Changed

  • CommandBox version to 5.7.0
  • Removed the pruning of certain CommandBox modules to allow for more use cases

Removed

  • Removed Adobe Coldfusion 2016 builds

Docker Hub Badge

Add Your Comment

Recent Entries

BoxLang 1.17 Series Part 4 : WriteDump Enhanced!

BoxLang 1.17 Series Part 4 : WriteDump Enhanced!

You call writeDump() on an ORM entity or a very rich class graph . The browser locks up. Thirty seconds later you get a page with forty thousand rows on it, you scroll for a while, you give up, and you go edit your code to dump a sub-key instead. Or worse, you crash the server.

Luis Majano
Luis Majano
September 11, 2026
BoxLang AI 3.4 Blog Series Part 4 : Locking Down Prompt Injection

BoxLang AI 3.4 Blog Series Part 4 : Locking Down Prompt Injection

LLM applications face a class of attack traditional input validation was never built for: prompt injection. An attacker embeds instructions in user input, a retrieved document, a web page your tool fetched, or an MCP result, trying to override your system prompt, exfiltrate data, or hijack a tool call. BoxLang AI 3.4.0 ships four layered, configurable defenses against exactly this, plus one more that's on unconditionally.

Luis Majano
Luis Majano
September 11, 2026