Update policies-vulnerability-patch.md

Author: ajp-io

docs/vendor/policies-vulnerability-patch.md

@@ -23,7 +23,7 @@ KOTS has automation that uses the Chainguard [melange](https://edu.chainguard.de
 
 ## Upstream CVE Disclosure
 
-Replicated KOTS and kURL deliver many upstream Kubernetes and ecosystem components.
+Replicated KOTS, kURL, and Embedded Cluster deliver many upstream Kubernetes and ecosystem components.
 We do not build these packages and rely on the upstream software vendor to distribute patches.
 Our intent is to make any patches available as soon as possible, but guarantee the following timeline to make upstream patches available after we learn about the vulnerability and a patch is available to us: