Merecat httpd is a small project, as such we have no possibility to support older versions. The only supported version is the latest released on GitHub:

https://github.com/troglobit/merecat/releases

Contact the project's main author and owner to report and discuss vulnerabilities. See the README in the projects top directory, also part of the distribution archive.