Merge pull request #3012 from replicatedhq/ajp-io-patch-1

Update policies-vulnerability-patch.md

Author: paigecalvert

docs/vendor/policies-vulnerability-patch.md

@@ -23,7 +23,7 @@ KOTS has automation that uses the Chainguard [melange](https://edu.chainguard.de
 
 ## Upstream CVE Disclosure
 
-Replicated KOTS and kURL deliver many upstream Kubernetes and ecosystem components.
+Replicated KOTS, kURL, and Embedded Cluster deliver many upstream Kubernetes and ecosystem components.
 We do not build these packages and rely on the upstream software vendor to distribute patches.
 Our intent is to make any patches available as soon as possible, but guarantee the following timeline to make upstream patches available after we learn about the vulnerability and a patch is available to us:
 
@@ -66,4 +66,4 @@ As subsequent versions of the vulnerable software are released, Replicated conti
 |-----|-------------|-----------|--------------------|
 | None | N/A | N/A | N/A |
 
-Last modified February 26, 2024.
+Last modified January 29, 2025.