fix: Update oas to address path-to-regexp advisory

fix: Update oas to address path-to-regexp advisory #1271