Brikit Apps do not directly reference Log4j, but Confluence can be at risk.

Log4j, Brikit, and Confluence

Because Brikit apps make calls to Confluence’s built-in logging mechanism, but do not include or directly reference log4j, Brikit apps do not introduce this vulnerability. However, because Confluence can be at risk in certain configurations, we recommend that our customers read and follow Atlassian’s guidance to ensure their servers are secure.