Jakub Ciolek - https://ciolek.dev/

Unauthenticated TLS 1.3 KeyUpdate record can cause persistent connection retention and DoS in crypto/tls

Inefficient candidate hostname parsing in crypto/x509

Missing bound checks can lead to memory corruption in safe Go in cmd/compile

Miscompilation allows memory corruption via CONVNOP-wrapped array copy in cmd/compile