CVE-2024-39689 — certifi removed GLOBALTRUST CA without updating pinned certs

certifi (Python's root CA bundle) retained the GLOBALTRUST 2020 CA after its removal from Mozilla's trust store, potentially allowing certs issued by a distrusted CA to be accepted.