Caddy, Traefik, and Teleport are written in Golang and not using OpenSSL. It’s a start.
If the Go issues were distinct I’d imagine they’d choose a different day to disclose/release?
I think it's just a funny coincidence. That's going based on what I know about the OpenSSL one; I don't know anything about the Go one. We'll find out!
See screenshot of the slack conversation: https://paste.pics/f5622033ae711b36e0bbcda393a67866
The ones that use Rust - Firefox and Windows
Additionally even if C++ is unsafe, it is still better than plain old C, which since Vista has been the migration path from kernel code. Nowadays there are even template libraries that can be used on kernel and drivers like WIL.
Finally the Microsoft Security Guidelines are:
1 - use managed languages if one can afford it
2 - use Rust
3 - use C++, alongside SAL and Core Guidelines checkers