Update vulnerable path-to-regexp version

Update vulnerable path-to-regexp version #245